Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-02 18:21 UTC
  • Importiert: 2026-06-09 12:22 UTC
  • CVSS: 8.4
  • Quelle-ID: thn_global
  • uid_hash: c63c1e282bffad4d7161e72a1d64f3be1c6baf61a5cc3babc60efbcdfcb2b86a

Inhalt

The Russian hacking group known as Gamaredon has been attributed to the continued exploitation of a WinRAR vulnerability to deliver multiple malware families aimed at data theft and propagation.

Per Sekoia, the activity involves the weaponization of CVE-2025-8088, a path traversal flaw in WinRAR, to launch an HTML Application payload dubbed GammaPhish, which is then used to retrieve an

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2025-8088

HIGH

8.4

HIGH

8.4

2025-08-08

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews