Emerging Cyber Threats to Critical Infrastructure in Central Asia

Overview

In early 2026, Central Asia has witnessed a notable increase in cyberattacks targeting critical infrastructure sectors such as power grids, water systems, industrial control systems (ICS), healthcare, and the financial sector. These attacks are primarily attributed to advanced persistent threat (APT) groups, indicating a medium-level threat to the region's national security and economic stability.

Notable APT Activities

• Silent Lynx Operations: In November 2025, the APT group known as Silent Lynx initiated "Operation Peek-a-Baku," focusing on espionage campaigns against diplomatic entities and critical infrastructure in Central Asia, Russia, and China. The group employed sophisticated malware tools, including PowerShell scripts and .NET implants, to infiltrate networks and exfiltrate sensitive data. (blog.netmanageit.com)

• SideWinder's Expansion: Historically targeting government and military entities, the SideWinder APT group has recently shifted its focus toward nuclear power facilities in South Asia. While this expansion is geographically distant, it underscores a broader trend of APT groups extending their operations beyond traditional targets. (kaspersky.com)

Targeted Sectors

• Power Grids and ICS: Cyber-kinetic attacks, which exploit vulnerabilities in ICS to cause physical damage, have been a growing concern. Malware such as VoltRuptor has been identified as capable of remotely sabotaging power grids by manipulating SCADA interfaces, leading to widespread blackouts. (geopoliticalmatters.com)

• Water Systems: APT groups have targeted water utilities, manipulating human-machine interfaces (HMIs) to overflow water storage tanks, resulting in significant water loss. For instance, in January 2024, the hacktivist group CyberArmyofRussia_Reborn claimed responsibility for such attacks in Texas, USA, and Poland. (levelblue.com)

• Healthcare and Financial Sectors: While specific incidents in Central Asia are limited, the global trend indicates increasing attacks on healthcare and financial institutions. APT groups often target these sectors to steal sensitive data and disrupt services, posing significant risks to public health and economic stability.

Implications for Central Asia

The rise in cyberattacks targeting critical infrastructure in Central Asia highlights several key concerns:

• National Security: Disruptions in power grids and water systems can lead to widespread societal unrest and economic challenges.

• Economic Impact: Attacks on the financial sector can erode public trust and deter investment, affecting the region's economic growth.

• Healthcare Vulnerabilities: Compromises in healthcare systems can delay medical treatments and jeopardize patient safety.

Recommendations

To mitigate these threats, it is recommended that Central Asian nations:

• Enhance Cybersecurity Measures: Implement robust security protocols for ICS and critical infrastructure systems.

• Conduct Regular Vulnerability Assessments: Identify and address potential weaknesses in critical infrastructure networks.

• Foster Regional Cooperation: Share threat intelligence and best practices among neighboring countries to strengthen collective defense.

By proactively addressing these challenges, Central Asia can bolster its resilience against cyber threats targeting critical infrastructure.