Thehackernews Exploitation of Critical WinRAR Flaw by Multiple Threat Actors
Article Content
Browse articles 
Multiple threat actors, including APTs and financially motivated groups, exploited a critical vulnerability (CVE-2025-8088) in RARLAB WinRAR to gain initial access and deliver various malicious payloads. Google Threat Intelligence Group (GTIG) reported that the flaw has been actively targeted since its discovery.
Ask AI about this cluster
Answers cite the sources they use
Updated 228d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track CVE-2025-8088 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating… 
Path Traversal Vulnerability in WinRAR Exploited by RomCom Group CVE-2025-8088 is a path traversal vulnerability in WinRAR versions up to 7.12, allowing attackers to exploit alternate data streams (ADSes) in RAR files to extract malicious payloads to sensitive system locations. Exploitation began in the wild on July 18, 2025, with attackers linked to the Russia-aligned RomCom…