www.cloudsek.com Kazakhstan-Linked Hackers Use AI to Steal Over 2,000 Tajik Government Documents
Article Content
- •Silent Lynx hacked Tajikistan's government, stealing over 2,000 sensitive documents.
- •The attack utilized the Hermes AI framework for reconnaissance and data extraction.
- •Evidence suggests a Kazakhstan nexus, but no state sponsorship has been confirmed.
A hacking group known as Silent Lynx, suspected to operate from Kazakhstan, has stolen over 2,000 sensitive documents from Tajikistan's government systems using an AI framework called Hermes. The attack, which began in mid-August 2026, involved the hackers gaining access to Tajikistan's electronic document management system through a compromised railway employee's account. The stolen documents included national security information and military correspondence. The operation was uncovered after the attackers inadvertently left a server exposed, allowing cybersecurity firm CloudSEK to analyze their methods and tools. The use of AI in this context represents a significant shift in cyber espionage tactics, allowing for greater automation and efficiency in data theft. Despite the evidence linking the group to Kazakhstan, there is no confirmation of state sponsorship. The incident highlights the evolving landscape of cyber threats involving AI technologies.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (13)
Following this threat?
Track Silent Lynx and Hermes in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What types of documents were stolen?
How did the hackers gain access?
Is there evidence of state sponsorship?
Continue Reading
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…