#7
The Hacker News
general
June 09, 2026 at 12:26 UTC
WinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in Ukraine
By [email protected] (The Hacker News)
AI Summary
Russia-aligned threat actors Earth Dahu (Gamaredon) and SHADOW-EARTH-066 (UAC-0226) are actively exploiting CVE-2025-8088, a WinRAR path traversal flaw patched in July 2025, in ongoing campaigns targeting Ukrainian military and government organizations. Trend Micro attributes the attacks to data theft and cyberespionage objectives, demonstrating that patched vulnerabilities remain effective against organizations slow to update.
Relevance score: 85.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →