SilkParasite/SpiceRAT/NodeEdgeRAT/NomadRAT IOC Sweep

Arnold Chan@slaz

•updated Sep 19, 2026•0•0•3

Comprehensive IOC sweep across endpoint file/process/network telemetry for the full set of known SilkParasite/SpiceRAT/NodeEdgeRAT/NomadRAT/BloodAlchemy infrastructure indicators reported by Hunt.io and Security Affairs: all listed C2/decoy/certificate-hosting IPs, all listed spoofed/infrastructure domains, and known file/certificate hashes (SHA256, SHA1).