A RAT hides its C2 inside Google Drive - traced to a years-long China-nexus spy campaign in Central Asia. https://intel.threadlinqs.com/threat/TL-2026-2554 #ThreatIntel #SpiceRAT #NodeEdgeRAT #NomadRAT

SilkParasite’s SpiceRAT/NodeEdgeRAT/ NomadRAT share fake certs & cloned RTX decoys—active since 2022 across Central Asia. #SilkParasite #SpiceRAT #RemoteAccessTrojan https://thedailytechfeed.com/silkparasites-spy-network-spreads-spicerat-rings-in-broad-central-asia-infrastructure/