Silent Lynx operators reportedly delegated Tajik government document theft to Hermes agents

An exposed operator server gave investigators more than a malware sample: according to CloudSEK, it contained conversations and working records from a Hermes-based offensive agent. Reuters reported that the operator directed reconnaissance and collection against Tajik government services, where access obtained through a railway employee account exposed defence-related correspondence.

CloudSEK says more than 2,000 documents were collected and that an agent wrote or operated tooling to download and organize them. Reuters corroborated that this is the researchers’ account, not an independent forensic audit by the governments involved. The exposed logs support scrutiny of model-directed task execution, but they do not prove that each credential action, railway intrusion or proposed Turkmen phishing campaign was performed autonomously by the model. Kazakhstan-linked attribution is also provisional.

The unusual failure is both excessive human-account reach and the opportunity to automate collection after that authority was obtained.

The claimed document count is a researcher-reported collection measure, not proof every item was classified or every transfer independently confirmed by Tajik authorities. The railway intrusion, government document access and unrelated Turkmen lure testing require separate effect and attribution evidence. ARTEX or other agent-tool naming cannot join these incidents to the same operator without a shared chain of custody.