WinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in Ukraine

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-09 12:26 UTC
  • Importiert: 2026-06-16 17:49 UTC
  • CVSS: 8.4
  • Quelle-ID: thn_global
  • uid_hash: 84d5d4cf3e96b9825ab8c93df5487d757c90be3d874b608d2ea302e83345fe1e

Inhalt

Two Russia-aligned cyber attack campaigns have continued to exploit a security flaw in WinRAR to target Ukrainian organisations, almost a year after patches for the vulnerability were released.

The activity has been attributed by Trend Micro to Earth Dahu (aka Gamaredon) and SHADOW-EARTH-066 (aka UAC-0226). It involves the exploitation of CVE-2025-8088, a path traversal flaw that allows an

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2025-8088

HIGH

8.4

HIGH

8.4

2025-08-08

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews