# Central Asian Governments Face SpiceRAT Cyber Threats

Recent cybersecurity research has identified that the SpiceRAT malware infrastructure, linked to Chinese state-funded certificates, has been actively targeting government and energy sectors across five Central Asian countries—Uzbekistan, Kazakhstan, Kyrgyzstan, Tajikistan, and Turkmenistan—since at least mid-2022. This threat involves interconnected malware families sharing command and control infrastructure, posing significant risks to critical infrastructure in the region. Procurement professionals and contractors specializing in cybersecurity, threat detection, and infrastructure protection should consider the heightened demand for advanced defense solutions and incident response capabilities in Central Asia.

- Government agencies and energy sector entities in Central Asia are increasingly vulnerable to sophisticated cyberattacks, indicating a growing market for cybersecurity products and services.
- Companies with expertise in malware mitigation, network defense, and threat intelligence can explore opportunities to support regional governments and critical infrastructure operators.
- This situation underscores the importance of integrating advanced cybersecurity measures into procurement planning for infrastructure projects in Central Asia.
- Organizations involved in cybersecurity research and monitoring, such as Bitdefender and Hunt.io, highlight the evolving threat landscape, which may influence future contract requirements and security standards.

**Jurisdictions:** international
**Industries:** Public Safety
**Topics:** Cybersecurity
**Published:** September 16, 2026

### Government Entities
- Uzbekistan State Railway

### Vendors
- Bitdefender (researcher)
- Hunt.io (researcher)

### Key Quotes
> The domains spoof named government and energy entities across five Central Asian countries, and passive DNS dates the activity back to at least mid-2022.
> — Original poster

### Sources
- [🐁 SpiceRAT infrastructure targets government and energy across Central Asia](https://www.reddit.com/r/cybersecurity/comments/1wi3do1/spicerat_infrastructure_targets_government_and) - reddit-cybersecurity