NomadRAT

SilkParasite Espionage Campaign Targets Central Asian Governments with Five Novel RATs

A previously unreported cyber espionage operation, tracked as SilkParasite, has been observed targeting government bodies in Central Asia. The intrusion set leverages seven remote access tool (RAT) families, five of which have never been documented publicly: DriveSilkRAT, CookiETagRAT, NomadRAT, GoginRAT, and NodeEdgeRAT. The campaign, first identified in late 2025 and reported in August 2026, is assessed to be espionage-focused, aiming to maintain persistent remote access to compromised systems. No specific threat actor attribution or CVE identifiers have been disclosed in the available reporting.