THREAT OPS › Threat News › OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia
OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia
<p><img alt="" class="attachment-securelist-huge-promo size-securelist-huge-promo wp-post-image" height="400" src="https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/07/30082905/octlurk_silklurk_backdoors-990x400.jpg" width="990" /></p><h2 id="introduction">Introduction</h2> <p>We have been tracking two new backdoors, <strong>OctLurk</strong> and <strong>SilkLurk</strong>, obse
MITRE ATT&CK techniques
Indicators of compromise
- 6ecf84fb18f6747ed08d7598364d853amd5
- 082d49ef9f14e6811d68c7e0e82e5069md5
- b874123a80fc4f40e06872b9cb54ebc6md5
- 45cf5916fab4272a1313c26e67aa9220md5
- 4e6d5c4770d5a822d7fcce6a74f7ad73md5
- 32a5985543433a4f60da2fafd873b927md5
- 2a571f6cee42a17d873f4c942649813fmd5
- 37dc84e4bcad92fa28f1e7778d088283md5
- 5e26df131ff0a679a0a2699b723b46e3md5
- cf903e4a1629aa0582fd0363b5786676md5
- 18dc8bff47cc282508354771d0c8cf8cmd5
- 9a1dd1d96481d61934dcc2d568971d06md5
- 3c9a1ba8e0c7475706adc6376e9d7b7cmd5
- 62944e26b36b1dcace429ae26ba66164md5
- ef59aad625eebda8650aec5820d6ce69md5
- be4731c09734da2e8eb6814a9c82f266md5
- 7c2f64461bb519c6cbf1fc687675514cmd5
- f4578e869a735cfad691f927bae3e638md5
- 2f18472866f38c1e1c2c5c14b9a6ab56md5
- 8269d6ba1b6842f9152c90cf7add9b93md5
- a0cc7accc79abb0287aaba825d0351f0md5
- a56cce62930a6bee80d679b4c495a340md5
- 1415a78b75de7db4ba3d1e61d7db4501md5
- a4d550a3ba0cd073fe3839b99d98a7a8md5
- https://pandorafms.com/en/remote-control/url
- https://profitday.kz/pdf/security2025/15.pdfurl
- https://blog.xlab.qianxin.com/mystrodx_covert_dual-mode_backdoor_en/url
- https://www.kaspersky.com/enterprise-security/threat-intelligence-reporting?icid=gl_sl_tip-lnk_sm-team_c09760866e96002eurl
- https://opentip.kaspersky.com/dns.multitoconference.com/results?icid=gl_sl_post-opentip_sm-team_0e1dcbc5b8415fb1&utm_source=SL&utm_medium=SL&utm_campaign=SLurl
- https://opentip.kaspersky.com/tj.tajikistandip.com/results/?icid=gl_sl_post-opentip_sm-team_718b00ad261e7ab8&utm_source=SL&utm_medium=SL&utm_campaign=SLurl
- https://opentip.kaspersky.com/fm01.clouddevicemetrics.com/results?icid=gl_sl_post-opentip_sm-team_c6be8a1980ae3047&utm_source=SL&utm_medium=SL&utm_campaign=SLurl
- http://opentip.kaspersky.com/confbase.mdpsupport.net/results?icid=gl_sl_post-opentip_sm-team_f80168a5d8d9bf45&utm_source=SL&utm_medium=SL&utm_campaign=SLurl
- https://opentip.kaspersky.com/digital.leroymerling.com/results?icid=gl_sl_post-opentip_sm-team_cde8e48aed11a215&utm_source=SL&utm_medium=SL&utm_campaign=SLurl
- https://opentip.kaspersky.com/api2.annoyingremote.com/results?icid=gl_sl_post-opentip_sm-team_3b98562b8708efd9&utm_source=SL&utm_medium=SL&utm_campaign=SLurl
- https://opentip.kaspersky.com/about.blsouqs.com/results?icid=gl_sl_post-opentip_sm-team_7e5696f7ba024838&utm_source=SL&utm_medium=SL&utm_campaign=SLurl
- https://opentip.kaspersky.com/ssl.blsouqs.com/results?icid=gl_sl_post-opentip_sm-team_7d1ad78d06298f98&utm_source=SL&utm_medium=SL&utm_campaign=SLurl
- https://opentip.kaspersky.com/dns.ssentialserv.xyz/results?icid=gl_sl_post-opentip_sm-team_1a3fb78fc9bb35b0&utm_source=SL&utm_medium=SL&utm_campaign=SLurl
- https://opentip.kaspersky.com/tyhbgtyuj.gleeze.com/results?icid=gl_sl_post-opentip_sm-team_4e2cdc2f928b8cd8&utm_source=SL&utm_medium=SL&utm_campaign=SLurl
- https://opentip.kaspersky.com/95.179.210.138/results?icid=gl_sl_post-opentip_sm-team_4ee185c00faa918a&utm_source=SL&utm_medium=SL&utm_campaign=SLurl
- https://opentip.kaspersky.com/wedfcvbn.gleeze.com/results?icid=gl_sl_post-opentip_sm-team_d4c1337466e5d399&utm_source=SL&utm_medium=SL&utm_campaign=SLurl