The Silent Lynx threat actor has been linked to recent attacks targeting government organizations in the Commonwealth of Independent States (CIS). These attacks, observed from June 2025 to August 2026, leverage a WinRAR flaw (CVE-2023-38831) to deploy reverse shells. The campaign utilizes multiple infection chains, including macro-enabled documents and GitHub-hosted PowerShell, demonstrating a persistent and adaptive adversary.