Technique
Registry Run Keys / Startup Folder
Windows can start programs on its own when a user logs in.
Read more
Malware profile
PickleShell reverse shell
PickleShell is a lightweight reverse shell on Windows.
In short
PickleShell is a lightweight reverse shell on Windows. It lets an operator type commands on an infected PC from afar. Cisco Talos found it in campaigns against government bodies in Central Asia and nearby countries, which it attributes to the group UAT-6275, also called Silent Lynx.
- Names1names in public reportsPickleShell
- Infection Steps5in the delivery chainLure arrives · Flaw abused
- Linked Groups1groups that use itSilent Lynx
In one minute
- What it is
- A small reverse shell. The infected PC calls out to the operator, who then sends commands.
- What it does
- Runs commands chosen by the operator on the PC. Talos describes it as lightweight and used to issue commands on compromised systems.
- Who uses it
- Attributed by Cisco Talos (14 October 2026) to UAT-6275, also called Silent Lynx and tracked as TAG-193 by Recorded Future.
- How it gets in
- A file dropped in the Windows Startup folder, so it runs at the next sign-in. In April 2026 a RAR file abused WinRAR flaw CVE-2025-8088 to place it there.
- What to do first
- Update WinRAR to 7.13 or later and alert on new files in the Startup folder.
What it does
Talos lists PickleShell with Chvost and LAPLAS as lightweight reverse shells that the group uses to run commands on compromised systems. Talos gives no deeper technical analysis in its post, so this page stays short.
The shell is one part of a chain. A decoy file arrives by email, the archive or shortcut starts the infection, and PickleShell waits in the Startup folder. The group behind it is described on our Silent Lynx profile, and the WinRAR flaw is explained on the page for CVE-2025-8088.
Names
Public sources use several names for this malware.
| Name | Where it appears |
|---|---|
| PickleShell | Cisco Talos malware name; its ClamAV signature is Win.Backdoor.PickleShell-10060602-0[1] |
How it spreads
Talos says later samples of its October 2025 chain placed PickleShell in the Startup folder. In April 2026 a RAR archive that exploits CVE-2025-8088 wrote it to the Startup folder, and it ran at the next user sign-in. Talos calls this the first vulnerability exploit it saw in the group's delivery.
How an infection runs
The order of steps in a typical infection, as the sources describe it.
Lure arrives
A RAR archive with an official-looking decoy reaches a government employee.[1]
Flaw abused
In the April 2026 chain, opening the archive in an unpatched WinRAR writes files outside the chosen folder.[1, 3, 4]
Shell planted
PickleShell lands in the Windows Startup folder.[1]
Next sign-in
Windows starts it when the user signs in again.[1]
Operator in control
The reverse shell calls out so the operator can issue commands.[1]
Timeline
- Oct 2025
Startup folder drops
In chain C, which Talos dates to October 2025, later samples deploy PickleShell in the Startup folder.[1]
- Apr 2026
WinRAR exploit
A RAR file abuses CVE-2025-8088 to place PickleShell in the Startup folder.[1]
- 14 Oct 2026
Talos report
Cisco Talos publishes the research with ClamAV signatures and a link to indicators on GitHub.[1]
Who uses it
Related vulnerabilities
Detection and defense
Questions
What is PickleShell?
A lightweight Windows reverse shell that lets an operator run commands on an infected PC, per Cisco Talos.
Who uses PickleShell?
Cisco Talos attributes it to UAT-6275, also known as Silent Lynx. Recorded Future tracks the group as TAG-193.
How did the WinRAR flaw deliver PickleShell?
In April 2026 a RAR file abused CVE-2025-8088 to place the shell in the Startup folder, and it ran at the next sign-in.
How do I detect it?
Use the Talos ClamAV signature Win.Backdoor.PickleShell-10060602-0, and alert on new files in the Startup folder.
In our research
- Silent Lynx Threat group
Sources
- Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations Cisco TalosSupports: PickleShell description, chains C and D, signatures, advice
- Recorded Future TAG-193 research Recorded Future Insikt GroupSupports: Joint research on the same group and the April 2026 chain
- WinRAR release notes, version 7.13 RARLABSupports: Fix for the traversal flaw and the affected components
- Known Exploited Vulnerabilities catalog CISASupports: CVE-2025-8088 listed on 12 August 2025
- CVE-2025-8088 NIST NVDSupports: Flaw description
- Exploitation for Client Execution (T1203) MITRE ATT&CKSupports: Technique name
Browse the threat library
- APT groups State-backed hacking groups, who they go after and how they get in. 51 profiles
- Countries The sectors, groups and national bodies that matter in each country. 32 profiles
- Ransomware groups How each group gets in, how it extorts and what stops it. 25 profiles
- Malware and tools Malware families and abused tools, what they do and how to spot them. 54 profiles
- Techniques Attack techniques in plain words, mapped to MITRE ATT&CK. 37 profiles
- Vulnerabilities Flaws attackers use in real attacks and what to do about them. 50 profiles
- Significant Cyber Incidents Significant incidents since October 2024, with a dated timeline, sources and lessons. 105 profiles
Stay Ahead of
Digital Threats
Take control of your digital security with an exclusive demo of our AI-driven threat intelligence platform.