Hackers Still Exploiting WinRAR Flaw Even Though Fix Was Released 6 Months Ago

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Amaranth-Dragon Exploits WinRAR Vulnerability Against Southeast Asian Governments The cyber threat group Amaranth-Dragon has leveraged a critical vulnerability in WinRAR, identified as CVE-2025-8088, to gain persistent control over systems belonging to Southeast Asian governments. This exploitation follows the vulnerability's addition to the CISA KEV list, indicating active exploitation in the wild. 11 sources 32