Details Emerge on WinRAR Zero-Day Attacks that Infected PCs with Malware

Russian 'RomCom' Hackers Exploit WinRAR Flaw Via Phishing Emails

ESET warns that at least two Russian hacking groups are using the zero-day flaw in WinRAR for cyberespionage purposes.

Details emerge on WinRAR zero-day attacks that infected PCs with malware

Researchers have released a report detailing how a recent WinRAR path traversal vulnerability tracked as CVE-2025-8088 was exploited in zero-day attacks by the Russian 'RomCom' hacking group to drop different malware payloads.

New WinRAR Zero-Day Exploited by RomCom Hackers

A flaw in WinRAR, tracked as CVE-2025-8088, has been exploited by the RomCom group to deploy malware

WinRAR Zero Day Exploited By RomCom Hackers In Targeted Attacks - Cybernoz - Cybersecurity News

ESET researchers have discovered a previously unknown vulnerability in WinRAR, exploited in the wild by Russia-aligned group RomCom. If you use WinRAR or related components such as the Windows versions of its command line tools, UnRAR.dll, or the portable UnRAR source code, update right away to the latest release. According to ESET telemetry, malicious archives were used in spearphishing campaigns between July 18 to July 21, 2025, targeting fina…

WinRAR zero-day exploited by RomCom hackers in targeted attacks - Help Net Security

CVE-2025-8088, a WinRAR zero-day, is used in spearphishing campaigns against financial, manufacturing, defense, and logistics firms.