UAT-6275 turns WinRAR path traversal into Startup-folder persistence for its PickleShell reverse shell. https://intel.threadlinqs.com/threat/TL-2026-3512 #ThreatIntel #CVE_2025_8088 #CVE_2025_25257 #PickleShell
October 14, 2026 at 2:30 PM
UAT-6275 turns WinRAR path traversal into Startup-folder persistence for its PickleShell reverse shell. https://intel.threadlinqs.com/threat/TL-2026-3512 #ThreatIntel #CVE_2025_8088 #CVE_2025_25257 #PickleShell
Ivanti zero-day chain roots fully patched VPNs - memory-only, so the Integrity Checker misses it. https://intel.threadlinqs.com/threat/TL-2026-3651 #ThreatIntel #CVE_2026_104935 #CVE_2026_102255 #PickleShell
October 15, 2026 at 6:27 PM
Ivanti zero-day chain roots fully patched VPNs - memory-only, so the Integrity Checker misses it. https://intel.threadlinqs.com/threat/TL-2026-3651 #ThreatIntel #CVE_2026_104935 #CVE_2026_102255 #PickleShell
Kazakhstan-linked UAT-6275 is using WinRAR flaw CVE-2025-8088 and custom reverse shells Chvost, Laplas and PickleShell against CIS government, water and energy networks. Patch WinRAR and block macro downloaders. https://cti.securitycyber.uk
October 15, 2026 at 4:19 PM
Kazakhstan-linked UAT-6275 is using WinRAR flaw CVE-2025-8088 and custom reverse shells Chvost, Laplas and PickleShell against CIS government, water and energy networks. Patch WinRAR and block macro downloaders. https://cti.securitycyber.uk
CIS政府組織がWinRARの脆弱性を悪用され、サイレントリンクによりリバースシェルを仕掛けられる。
Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks
Silent Lynx exploited WinRAR CVE-2025-8088 to place PickleShell in the Windows Startup folder during attacks on CIS governments.
thehackernews.com
October 15, 2026 at 4:48 PM
CIS政府組織がWinRARの脆弱性を悪用され、サイレントリンクによりリバースシェルを仕掛けられる。
@talosintelligence.com
Kazakhstan-linked UAT-6275 targets CIS governments using reverse shells, PowerShell and WinRAR CVE-2025-8088.
-
IOCs: CVE-2025-8088, PickleShell, Chvost
-
#APT #Malware #ThreatIntel
Kazakhstan-linked UAT-6275 targets CIS governments using reverse shells, PowerShell and WinRAR CVE-2025-8088.
-
IOCs: CVE-2025-8088, PickleShell, Chvost
-
#APT #Malware #ThreatIntel
UAT-6275 Targets CIS Governments
blog.talosintelligence.com
October 14, 2026 at 4:09 PM
@talosintelligence.com
Kazakhstan-linked UAT-6275 targets CIS governments using reverse shells, PowerShell and WinRAR CVE-2025-8088.
-
IOCs: CVE-2025-8088, PickleShell, Chvost
-
#APT #Malware #ThreatIntel
Kazakhstan-linked UAT-6275 targets CIS governments using reverse shells, PowerShell and WinRAR CVE-2025-8088.
-
IOCs: CVE-2025-8088, PickleShell, Chvost
-
#APT #Malware #ThreatIntel