In Central Asia, since January 2025, two new backdoors have been observed: OctLurk and SilkLurk. The attackers use customized loaders, heavy obfuscation, and additional functionality via plug-ins and LurkProxy.
Authorities and security firms report a state-sponsored campaign that compromised trusted South Korean websites. The attackers abused AnySign4PC vulnerabilities so visitors could be infected without downloads or prompts.
Kaspersky meldt een golf aanvallen sinds januari 2025 op overheidsorganisaties in Centraal-Azië. Onderzoekers koppelen de activiteit aan OctLurk and SilkLurk, een multi-plugin backdoor-framework.
