研究人员周三表示，这些黑客很可能来自哈萨克斯坦，他们曾攻击过俄罗斯的一家炼油厂，并入侵了俄罗斯某市政府的网络。这一事件罕见地显示了来自哈萨克斯坦这样的“小邻国”对俄罗斯实施的网络间谍活动。
Hackers likely based in Kazakhstan targeted a Russian oil refinery and compromised a Russian municipal government network earlier this year, researchers said on Wednesday, a rare glimpse of cyberespionage being deployed against Moscow from a smaller neighbour.
思科公司（CSCO.O）的沈志恩（Chi-en Shen）与网络安全公司Recorded Future的Julian-Ferdinand Vögele在联合报告中指出，这些被称为“Silent Lynx”的黑客“很可能来自哈萨克斯坦”，并且已经入侵了中亚地区的多个政府机构。
In a joint report, Chi-en Shen from Cisco (CSCO.O) and Julian-Ferdinand Vögele of the cybersecurity firm Recorded Future said the hackers -- nicknamed "Silent Lynx" -- were "likely based in Kazakhstan" and had hacked into government organizations across Central Asia.
研究人员称，“Silent Lynx”主要使用“鱼叉式网络钓鱼”攻击手段：他们通过发送看似正规的电子邮件，并附上具有欺骗性的附件，来感染那些疏于防范的目标。
The researchers said Silent Lynx favoured “spear phishing” emails, using important-looking attachments to infect targets unwary enough to open them.
约翰霍普金斯大学高级国际研究学院研究网络政策与冲突的博士生Oleg Shakirov表示：“这一事件提醒我们，网络间谍活动并不局限于少数几个网络强国；其他国家也在迅速追赶。”研究人员指出，“Silent Lynx”曾攻击俄罗斯南部的奥尔斯克炼油厂；该炼油厂在8月份遭到乌克兰无人机袭击后被迫停产数月。此外，有证据表明他们还入侵了位于莫斯科以东约425公里（265英里）处的下诺夫哥罗德市政府系统。
The spying was "a reminder that the cyberespionage game is not limited to only a few cyber powers," said Oleg Shakirov, a doctoral student who studies cyber policy and conflict at the Johns Hopkins School of Advanced International Studies. "Other nations are catching up." The researchers said Silent Lynx targeted the Orsk Oil Refinery in southern Russia, which was knocked out for months after it was hit in a Ukrainian drone attack in August, and that there was evidence they had broken into the government of Nizhny Novgorod, a city about 425 kilometers (265 miles) east of Moscow.
这家名为Orsknefteorgsintez的中型炼油厂距离哈萨克斯坦边境仅25公里（16英里）；由于乌克兰无人机袭击的频繁发生，俄罗斯政府已向哈萨克斯坦寻求帮助，希望其提供炼油能力。
The mid-sized Orsknefteorgsintez refinery is about 25 kilometers (16 miles) from the Kazakh border; repeated outages from Ukrainian drone attacks have prompted the Russian government to tap Kazakhstan for refining capacity.
下诺夫哥罗德位于伏尔加河与奥卡河的交汇处，处于里海上游地区——对于内陆国家哈萨克斯坦而言，里海是至关重要的水资源来源。奥尔斯克炼油厂及下诺夫哥罗德市政府均未回复任何评论请求。目前，试图与这些黑客取得联系的努力均未成功。
Nizhny Novgorod sits at the confluence of the Volga and Oka rivers and is upstream of the Caspian Sea, a critical body of water for landlocked Kazakhstan. The Orsk refinery and Nizhny Novgorod government did not return messages seeking comment. Attempts to reach the hackers were unsuccessful.
研究人员表示，沉默猞猁与哈萨克斯坦的关联证据包括：黑客在恶意软件代码编译完成后不久，就从哈萨克斯坦对其进行测试的明显努力，以及与哈萨克斯坦工作时间一致的活动。研究人员还表示，黑客的间谍行动也与哈萨克斯坦的战略利益相吻合。
The researchers said evidence for Silent Lynx's Kazakh ties included apparent efforts by the hackers to test their malicious software from Kazakhstan shortly after its code was compiled and activity consistent with Kazakh working hours. The hackers' spy campaign also lined up with Kazakhstan's strategic interests, the researchers said.
例如，他们表示发现证据表明，黑客在哈萨克斯坦于2026年初批准与塔吉克斯坦条约的同时，入侵了塔吉克斯坦的一个政府机构；此外，他们还发现证据表明，白俄罗斯的一个政府机构在白俄罗斯与哈萨克斯坦外交官于4月举行会议之前，也遭到类似入侵。
For example, they said they found evidence that the hackers had compromised a Tajik government agency just as Kazakhstan was ratifying a treaty with Tajikistan in early 2026, as well as evidence that a Belarusian government agency was similarly compromised ahead of a meeting between diplomats from Belarus and Kazakhstan in April.
哈萨克斯坦、俄罗斯、塔吉克斯坦和白俄罗斯政府均未回复寻求置评的信息。
The Kazakh, Russian, Tajik and Belarusian governments did not return messages seeking comment.