A Chinese-speaking threat actor has been observed targeting government organizations in Central Asia, including Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and Syria, since January 2025. The campaign utilizes newly identified tailored backdoors, OctLurk and SilkLurk, which operate primarily in memory. These backdoors inject plugins to launch shells, scan networks, dump credentials, and perform keylogging, indicating a sophisticated cyber-espionage operation.