importantSYS.SOURCE: The Hacker News• 2026-10-15T21:30:26+05:30

Silent Lynx Leverages WinRAR Vulnerability for Reverse Shell Deployment in CIS Government Attacks

#vulnerability #malware #government

Silent Lynx conducted targeted attacks on CIS government organizations from June 2025 to August 2026, exploiting a WinRAR vulnerability to deploy reverse shells through multiple infection chains. The campaign utilized macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives.

The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS).

The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives

Read original article

*** END OF TRANSMISSION ***

> META UNVEILS OPEN-WEIGHT AI MODEL OPTIMIZED FOR MACS > AMAZON'S PANOS PANAY ENVISIONS AI-DRIVEN AMBIENT DEVICES REDEFINING PERSONAL COMPUTING > BLUESKY EXPANDS COMMERCE FEATURES WITH PAYMENT INTEGRATION > UNAUTHORIZED ACCESS ATTEMPTS ON SONARR SETUP VIA TORRENT SITES > ANTHROPIC GRANTS METR RESEARCHERS EMPLOYEE-LEVEL ACCESS FOR AI SYSTEM EVALUATION > BLUESKY LAUNCHES AI-DRIVEN ATTIE PLATFORM FOR DECENTRALIZED WEB DEVELOPMENT > ANALYZING THE INTERCONNECTED GLOBAL CRISES AND PATHWAYS TO RESILIENCE > WEEKLY SECURITY THREATS REPORT: ADOBE RCE, DNS WALLET THEFT, AND 23 ADDITIONAL VULNERABILITIES > E INK KALEIDO 4: NEXT-GENERATION COLOR EPAPER PLATFORM RELEASE > TECHCRUNCH FOUNDER SUMMIT EARLY BOOKING DISCOUNT EXPIRATION REMINDER: OCTOBER 16 DEADLINE> META UNVEILS OPEN-WEIGHT AI MODEL OPTIMIZED FOR MACS > AMAZON'S PANOS PANAY ENVISIONS AI-DRIVEN AMBIENT DEVICES REDEFINING PERSONAL COMPUTING > BLUESKY EXPANDS COMMERCE FEATURES WITH PAYMENT INTEGRATION > UNAUTHORIZED ACCESS ATTEMPTS ON SONARR SETUP VIA TORRENT SITES > ANTHROPIC GRANTS METR RESEARCHERS EMPLOYEE-LEVEL ACCESS FOR AI SYSTEM EVALUATION > BLUESKY LAUNCHES AI-DRIVEN ATTIE PLATFORM FOR DECENTRALIZED WEB DEVELOPMENT > ANALYZING THE INTERCONNECTED GLOBAL CRISES AND PATHWAYS TO RESILIENCE > WEEKLY SECURITY THREATS REPORT: ADOBE RCE, DNS WALLET THEFT, AND 23 ADDITIONAL VULNERABILITIES > E INK KALEIDO 4: NEXT-GENERATION COLOR EPAPER PLATFORM RELEASE > TECHCRUNCH FOUNDER SUMMIT EARLY BOOKING DISCOUNT EXPIRATION REMINDER: OCTOBER 16 DEADLINE