Threat watch / Threat actors

Silent Lynx

Unknown updated 12 Nov 2026

An espionage group that targets governments in Central Asia and the region. The Record says it is also tracked as Cavalry Werewolf and YoroTrooper; CloudSEK lists Cavalry Werewolf as an overlapping group.

Attribution

CloudSEK assesses "with high confidence" that an exposed server holding stolen Tajik and Uzbek government data belongs to a Silent Lynx operator, based on implant code markers and build paths shared with published samples. [1]

CloudSEK assesses "with medium confidence" that the operator has a Kazakhstan nexus. The Record notes that this does not establish any link to the Kazakh government. [1][2]

Incidents in the watch

  1. Silent Lynx: an AI agent helped spy on Tajik and Uzbek government systems High

← All threat actors