Hackers Still Using Patched WinRAR Flaw for Malware Drops, Warns Google

Back Hackread

Hackers Still Using Patched WinRAR Flaw for Malware Drops, Warns Google

Hackread •Deeba Ahmed • January 28, 2026

Share: View original

The Google Threat Intelligence Group (GTIG) warns that nation-state actors and financially motivated threat actors are exploiting a…

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Amaranth-Dragon Exploits WinRAR Vulnerability Against Southeast Asian Governments The cyber threat group Amaranth-Dragon has leveraged a critical vulnerability in WinRAR, identified as CVE-2025-8088, to gain persistent control over systems belonging to Southeast Asian governments. This exploitation follows the vulnerability's addition to the CISA KEV list, indicating active exploitation in the wild. 11 sources 32

Extracted Entities

Attack Types (1)

Tools (1)