Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks

The threat actor Silent Lynx is targeting government entities across the CIS region in a campaign spanning from mid-2025 through August 2026. The attacks utilize multiple infection vectors, including macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell payloads, and crafted WinRAR archives to establish a reverse shell.