UAT-6275 Hackers Use WinRAR Exploit and GitHub PowerShell to Target CIS Governments

Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks

The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives

Suspected Kazakhstan-linked hackers target governments across former Soviet states

A roughly 2-year-old cyber-espionage campaign against Central Asian states appears to originate in Kazakhstan, researchers said.

UAT-6275 Hackers Exploit WinRAR Flaw to Target CIS Government Organizations

UAT-6275 hackers have used a known WinRAR flaw to plant malware on Windows systems while targeting government organizations across the Commonwealth of Independent States (CIS). The activity shows how an unpatched archive tool can turn a routine attachment into lasting remote access, with the malicious program starting when the victim next signs in. The campaign involves CVE-2025-8088, a path traversal flaw that lets crafted archives write files …

UAT-6275 Hackers Use WinRAR Exploit and GitHub PowerShell to Target CIS Governments

An espionage campaign targeting government organizations across the Commonwealth of Independent States (CIS), with additional interest in water,… Read more →