Nation

Securityaffairs.Co •Pierluigi Paganini • January 29, 2026

Multiple threat actors exploited a now-patched critical WinRAR flaw to gain initial access and deliver various malicious payloads. Google Threat Intelligence Group (GTIG) revealed that multiple threat actors, including APTs and financially motivated groups, are exploiting the CVE-2025-8088 flaw in RARLAB WinRAR to establish initial access and deploy a diverse array of payloads. The WinRAR […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Exploitation of Critical WinRAR Flaw by Multiple Threat Actors Multiple threat actors, including APTs and financially motivated groups, exploited a critical vulnerability (CVE-2025-8088) in RARLAB WinRAR to gain initial access and deliver various malicious payloads. Google Threat Intelligence Group (GTIG) reported that the flaw has been actively targeted since its discovery. 2 sources 40

Extracted Entities

Nation

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Tools (1)