Criminals are exploiting a 2025 WinRAR bug because nobody is updating their app

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Exploitation of 2025 WinRAR Vulnerability Due to Lack of Updates A vulnerability identified as CVE-2025-8088 in WinRAR allows attackers to hide malware in archives that can install malicious payloads to the startup app folder. This exploit was patched in April 2025, but many users have not updated their applications, leaving them vulnerable to attacks. Criminals are actively exploiting this flaw as users continue to neglect updates. 2 sources 25