Threats Affecting Turkmenistan

SilkParasite is a cyberespionage campaign linked with medium confidence to a China-nexus threat actor targeting government bodies across Central Asia. It employs seven remote access tool families, including five previously undocumented RATs, and uses malicious Microsoft Office documents for initial access. The operation uses DLL sideloading and Google Drive for command-and-control to evade detection. Infrastructure analysis connects it to China Unicom's backbone network, indicating a well-organized and operational software development effort.

MediumCampaignGeorgiaKazakhstanKyrgyzstan+4#dll sideloading#cookietagrat#china-nexus apt

This report highlights a cyber espionage campaign attributed to the Iranian APT group Charming Kitten, targeting eight countries and eight critical sectors simultaneously. The campaign, dubbed Operation Olalampo, affects Egypt, Saudi Arabia, UAE, Turkey, Hungary, Turkmenistan, Israel, and South America, focusing on government, healthcare, financial services, energy, education, telecommunications, defense, and industrial sectors. The information is sourced from a Reddit post linking to a GitHub repository simulating adversary tactics. No specific vulnerabilities or exploits are detailed, and no affected software versions are identified.

CriticalCampaignEgyptSaudi ArabiaUnited Arab Emirates+4#blueteamsec+asknetsec+information_security#reddit#high-priority

Hydra Saiga, a suspected Kazakhstani state-sponsored threat actor, has been actively targeting government, energy, and critical infrastructure in Central Asia, Europe, and the Middle East since 2021. The group is known for using Telegram Bot API for C2 communication and employing a mix of custom implants and 'Living off the Land' techniques. Their activities align closely with Kazakhstan's geopolitical interests, particularly in water and energy sectors. The group has compromised at least 34 organizations across 8 countries, with reconnaissance extending to over 200 additional targets globally. Hydra Saiga's operations demonstrate a clear focus on water infrastructure linked to major regional rivers and gas distribution systems, reflecting strategic intelligence collection efforts.

MediumMalwareKazakhstanRussiaUzbekistan+5#kazakhstan#jlorat#custom implants