securelist.com· Jul 30, 2026· by Saurabh Sharma, Yaroslav Kikel

OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia

Our experts discovered OctLurk and SilkLurk, backdoors operating primarily in memory, targeting Central Asia. They inject plugins to launch shells, scan networks, dump credentials, and keylogging.

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#GReAT research#Malware descriptions#Malware Technologies#Targeted attacks#Keyloggers#Backdoor#PowerShell#Credentials theft

OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia

More Writeups Like This

GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltration

Angry Birds: Toy Ghouls’ new toys

Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia

MacSync under the microscope: new delivery methods and a new payload