MEDIUMApt
Global

China-Linked APT Uses AI to Optimize Hand-Built Malware

·Source: Bank Info Security

Updated:

Executive Summary

SilkParasite Deployed Against Central Asian Governments Bitdefender said the China-linked SilkParasite espionage campaign deployed seven modular RATs against Central Asian governments, with coding artifacts indicating

Analysis

SilkParasite Deployed Against Central Asian Governments Bitdefender said the China-linked SilkParasite espionage campaign deployed seven modular RATs against Central Asian governments, with coding artifacts indicating AI assisted expert developers rather than generating the stealth-focused malware itself.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/china-linked-apt-uses-ai-to-optimize-hand-built-malware-image_small-4-a-32597.jpg
VirusTotalURLhaus
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
VirusTotalURLhaus
Source Attribution

Originally published by Bank Info Security on Aug 19, 2026.

Related Threats

MEDIUMApt

'Living Off the Plant' OT Attacks Pose Physical Safety Risk

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/living-off-plant-ot-attacks-pose-physical-safety-risk-image_small-5-a-32591.jpg" align=right hspace=4><b>Beware Abuse of Native OT Functionality, Says Orange Cyberdefense's Ric Derbyshire</b><br>Attackers can employ "living off the plant" tactics to stealthily access and move laterally inside industrial networks, abusing native fu

Bank Info Security
CRITICALApt

CISA Malcolm

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-230-01.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition or execute arbitrary code.</strong></p> <p>The following versions of CISA Malcolm are affected:</p> <ul> <li>Malcolm <26.0

CVE-2026-55676CVE-2026-63133
CISA Advisories
HIGHApt

New Malware turns Microsoft cloud into its control center

Security researchers are warning of a newly uncovered Python malware framework that routes much of its command-and-control (C2) activity through Microsoft services that defenders already expect to see. The Ontinue Cyber Defense Center discovered the implant while investigating an active campaign in July and has since tracked it as TWINLOOT. It was seen using SharePoint Online as a file-based dead

CSO Online