Dangerous new malware exploits WinRAR flaw - here's what we know

Techradar • February 5, 2026

Some researchers also mentioned APT44 and Turla, Carpathian, and multiple Chinese actors that were dropping the POISONIVY malware . Google's Threat ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Amaranth-Dragon Exploits WinRAR Vulnerability Against Southeast Asian Governments The cyber threat group Amaranth-Dragon has leveraged a critical vulnerability in WinRAR, identified as CVE-2025-8088, to gain persistent control over systems belonging to Southeast Asian governments. This exploitation follows the vulnerability's addition to the CISA KEV list, indicating active exploitation in the wild. 11 sources 32

Extracted Entities

Dangerous new malware exploits WinRAR flaw - here's what we know

The full story

Extracted Entities

APT Groups (3)

Attack Types (1)

Malware (1)

Tools (1)