highMalware
Silent Lynx Exploits WinRAR Flaw in CIS Government Attacks
The Silent Lynx threat actor has been linked to a series of attacks targeting government organizations across the Commonwealth of Independent States (CIS) from June 2025 through August 2026. The operations employ four distinct infection chains leveraging macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives to deploy reverse shells. No specific CVE was identified in the reporting, but the activity underscores the continued risk of exploiting archiving software flaws in targeted campaigns.
The Hacker News1 min read