China-Linked APT Uses AI to Optimize Malware: SilkParasite Campaign

China-linked cyber attackers are using artificial intelligence to optimize their hand-built malware. Researchers found seven malware families, five of them previously unknown, in a campaign called SilkParasite. These were deployed against government agencies in Central Asia for almost a year in 2025. What's interesting is that the AI helps refine expert code, rather than generating the malware itself. This toolkit is described as small, modular, and professionally engineered. The attackers gain initial access through malicious Microsoft Office files, likely sent via spear-phishing emails. These emails often include password-protected archives to bypass security scans. Once opened, a macro drops a payload. The hackers even adapt their scripts to avoid detection by common antivirus tools. The phishing documents were designed to look relevant to government entities in Uzbekistan, Turkmenistan, Kyrgyzstan, Tajikistan, and Kazakhstan. This shows how advanced cyber threats are becoming, making sophisticated attacks harder to detect.