Multiple Threats Exploit WinRAR Zero-Day in Global Attacks
TL;DR
A critical zero-day vulnerability in WinRAR has been actively exploited for weeks by two Russian cybercrime groups, RomCom and Paper Werewolf, through malicious archives in phishing attacks. The vulnerability, CVE-2025-8088, was exploited to plant malicious files and was patched within six days of discovery, highlighting the sophistication and resource investment of the attackers.
- High-severity WinRAR 0-day exploited for weeks by 2 groups Ars Technica
- Update WinRAR tools now: RomCom and others exploiting zero-day vulnerability WeLiveSecurity
- WinRAR zero-day exploited to plant malware on archive extraction BleepingComputer
- Russian Hackers Exploited WinRAR Zero-Day in Attacks on Europe, Canada SecurityWeek
- ⚡ Weekly Recap: BadCam Attack, WinRAR 0-Day, EDR Killer, NVIDIA Flaws, Ransomware Attacks & More The Hacker News
Want the full story? Read the original reporting
Read on Ars Technica