Russian Hackers Exploit WinRAR Flaw in Ukraine Cyber Attacks

Cloudflare has disrupted a phishing campaign by the Russia-aligned group FlyingYeti targeting Ukraine, exploiting a WinRAR vulnerability to deliver COOKBOX malware. The campaign used debt-themed lures to trick victims into downloading malicious files, allowing attackers to gain control over infected systems. The threat actor primarily targets Ukrainian military entities and uses dynamic DNS and cloud platforms for command-and-control purposes.