Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks

First reported by Cyber Security News at · Updated · 3 sources

The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives

Covered by 3 publishers within 9 hours of the first report.

Summary from The Hacker News.

Reporting3

Cyber Security News UAT-6275 Hackers Exploit WinRAR Flaw to Target CIS Government Organizations · Tushar Subhra Dutta
The Hacker News Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks · info@thehackernews.com (The Hacker News)
Security Affairs Silent Lynx: Kazakhstan-Linked Hackers Target Russian Refinery and Government · Pierluigi Paganini