COOKIETAGRATCookiETagRAT

CookiETagRAT is a C++ remote access trojan used by the SilkParasite activity cluster, observed by Bitdefender in Central Asia. It hides its command-and-control exchange inside HTTP Cookie and ETag headers, so the traffic carries no distinctive body and inspection that looks only at payloads sees ordinary web requests. Delivery relies on DLL sideloading through renamed legitimate binaries.