{"id":33944,"date":"2026-10-15T20:00:26","date_gmt":"2026-10-15T16:00:26","guid":{"rendered":"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html"},"modified":"2026-10-15T20:00:26","modified_gmt":"2026-10-15T16:00:26","slug":"silent-lynx-exploits-winrar-flaw-to-deploy-reverse-shell-in-cis-government-attacks","status":"publish","type":"post","link":"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html","title":{"rendered":"Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks"},"content":{"rendered":"The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS).\n\nThe activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives","protected":false},"excerpt":{"rendered":"<p>The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS).<\/p>\n<p>The activity, observed from June 2025 through August 2026, involves four differ&#8230;<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[],"tags":[],"jetpack_publicize_connections":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks - AZGAD WEBSITE SECURITY BLOG<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks - AZGAD WEBSITE SECURITY BLOG\" \/>\n<meta property=\"og:description\" content=\"The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August 2026, involves four differ...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html\" \/>\n<meta property=\"og:site_name\" content=\"AZGAD WEBSITE SECURITY BLOG\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/pages\/AZGAD-Security\/1551506958422428\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-15T16:00:26+00:00\" \/>\n<meta name=\"author\" content=\"The Hacker News\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@azgadsecurity\" \/>\n<meta name=\"twitter:site\" content=\"@azgadsecurity\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"The Hacker News\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html#article\",\"isPartOf\":{\"@id\":\"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html\"},\"author\":{\"name\":\"The Hacker News\",\"@id\":\"https:\/\/www.azgadsecurity.com\/blog\/#\/schema\/person\/b6df45c9299136b091846a34e50b50e8\"},\"headline\":\"Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks\",\"datePublished\":\"2026-10-15T16:00:26+00:00\",\"dateModified\":\"2026-10-15T16:00:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html\"},\"wordCount\":66,\"publisher\":{\"@id\":\"https:\/\/www.azgadsecurity.com\/blog\/#organization\"},\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html\",\"url\":\"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html\",\"name\":\"Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks - AZGAD WEBSITE SECURITY BLOG\",\"isPartOf\":{\"@id\":\"https:\/\/www.azgadsecurity.com\/blog\/#website\"},\"datePublished\":\"2026-10-15T16:00:26+00:00\",\"dateModified\":\"2026-10-15T16:00:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.azgadsecurity.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.azgadsecurity.com\/blog\/#website\",\"url\":\"https:\/\/www.azgadsecurity.com\/blog\/\",\"name\":\"AZGAD WEBSITE SECURITY BLOG\",\"description\":\"Cyber Security\",\"publisher\":{\"@id\":\"https:\/\/www.azgadsecurity.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.azgadsecurity.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.azgadsecurity.com\/blog\/#organization\",\"name\":\"ARANET LLC.\",\"url\":\"https:\/\/www.azgadsecurity.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.azgadsecurity.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/i2.wp.com\/www.azgadsecurity.com\/blog\/wp-content\/uploads\/2015\/12\/aranetlogo_350c.png?fit=350%2C350&ssl=1\",\"contentUrl\":\"https:\/\/i2.wp.com\/www.azgadsecurity.com\/blog\/wp-content\/uploads\/2015\/12\/aranetlogo_350c.png?fit=350%2C350&ssl=1\",\"width\":350,\"height\":350,\"caption\":\"ARANET LLC.\"},\"image\":{\"@id\":\"https:\/\/www.azgadsecurity.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/pages\/AZGAD-Security\/1551506958422428\",\"https:\/\/twitter.com\/azgadsecurity\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.azgadsecurity.com\/blog\/#\/schema\/person\/b6df45c9299136b091846a34e50b50e8\",\"name\":\"The Hacker News\",\"sameAs\":[\"https:\/\/thehackernews.com\/\"],\"url\":\"https:\/\/www.azgadsecurity.com\/blog\/author\/the-hacker-news\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks - AZGAD WEBSITE SECURITY BLOG","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html","og_locale":"en_US","og_type":"article","og_title":"Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks - AZGAD WEBSITE SECURITY BLOG","og_description":"The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August 2026, involves four differ...","og_url":"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html","og_site_name":"AZGAD WEBSITE SECURITY BLOG","article_publisher":"https:\/\/www.facebook.com\/pages\/AZGAD-Security\/1551506958422428","article_published_time":"2026-10-15T16:00:26+00:00","author":"The Hacker News","twitter_card":"summary_large_image","twitter_creator":"@azgadsecurity","twitter_site":"@azgadsecurity","twitter_misc":{"Written by":"The Hacker News"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html#article","isPartOf":{"@id":"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html"},"author":{"name":"The Hacker News","@id":"https:\/\/www.azgadsecurity.com\/blog\/#\/schema\/person\/b6df45c9299136b091846a34e50b50e8"},"headline":"Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks","datePublished":"2026-10-15T16:00:26+00:00","dateModified":"2026-10-15T16:00:26+00:00","mainEntityOfPage":{"@id":"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html"},"wordCount":66,"publisher":{"@id":"https:\/\/www.azgadsecurity.com\/blog\/#organization"},"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html","url":"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html","name":"Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks - AZGAD WEBSITE SECURITY BLOG","isPartOf":{"@id":"https:\/\/www.azgadsecurity.com\/blog\/#website"},"datePublished":"2026-10-15T16:00:26+00:00","dateModified":"2026-10-15T16:00:26+00:00","breadcrumb":{"@id":"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/thehackernews.com\/2026\/10\/silent-lynx-exploits-winrar-flaw-to.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.azgadsecurity.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks"}]},{"@type":"WebSite","@id":"https:\/\/www.azgadsecurity.com\/blog\/#website","url":"https:\/\/www.azgadsecurity.com\/blog\/","name":"AZGAD WEBSITE SECURITY BLOG","description":"Cyber Security","publisher":{"@id":"https:\/\/www.azgadsecurity.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.azgadsecurity.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.azgadsecurity.com\/blog\/#organization","name":"ARANET LLC.","url":"https:\/\/www.azgadsecurity.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.azgadsecurity.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/i2.wp.com\/www.azgadsecurity.com\/blog\/wp-content\/uploads\/2015\/12\/aranetlogo_350c.png?fit=350%2C350&ssl=1","contentUrl":"https:\/\/i2.wp.com\/www.azgadsecurity.com\/blog\/wp-content\/uploads\/2015\/12\/aranetlogo_350c.png?fit=350%2C350&ssl=1","width":350,"height":350,"caption":"ARANET LLC."},"image":{"@id":"https:\/\/www.azgadsecurity.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/pages\/AZGAD-Security\/1551506958422428","https:\/\/twitter.com\/azgadsecurity"]},{"@type":"Person","@id":"https:\/\/www.azgadsecurity.com\/blog\/#\/schema\/person\/b6df45c9299136b091846a34e50b50e8","name":"The Hacker News","sameAs":["https:\/\/thehackernews.com\/"],"url":"https:\/\/www.azgadsecurity.com\/blog\/author\/the-hacker-news\/"}]}},"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p7Gzck-8Pu","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/www.azgadsecurity.com\/blog\/wp-json\/wp\/v2\/posts\/33944"}],"collection":[{"href":"https:\/\/www.azgadsecurity.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.azgadsecurity.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.azgadsecurity.com\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.azgadsecurity.com\/blog\/wp-json\/wp\/v2\/comments?post=33944"}],"version-history":[{"count":1,"href":"https:\/\/www.azgadsecurity.com\/blog\/wp-json\/wp\/v2\/posts\/33944\/revisions"}],"predecessor-version":[{"id":33945,"href":"https:\/\/www.azgadsecurity.com\/blog\/wp-json\/wp\/v2\/posts\/33944\/revisions\/33945"}],"wp:attachment":[{"href":"https:\/\/www.azgadsecurity.com\/blog\/wp-json\/wp\/v2\/media?parent=33944"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.azgadsecurity.com\/blog\/wp-json\/wp\/v2\/categories?post=33944"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.azgadsecurity.com\/blog\/wp-json\/wp\/v2\/tags?post=33944"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}