An unidentified Chinese-speaking threat actor has been conducting cyber attacks on government organizations in Central Asia since January 2025. The actor uses custom backdoors OctLurk and SilkLurk, along with LurkProxy, to compromise networks and steal sensitive data. The group has not been linked to any known adversary.