Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks

The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States. The activity, observed from June 2025 through August 2026, uses four infection chains including macro-enabled documents, GitHub-hosted PowerShell, and crafted WinRAR archives.