Two Russia-aligned threat groups, Earth Dahu (Gamaredon) and SHADOW-EARTH-066 (UAC-0226), continue to exploit a patched WinRAR vulnerability (CVE-2025-8088) to target Ukrainian organizations nearly a year after fixes were released. The campaigns leverage a path traversal flaw to deploy information-stealing malware against Ukrainian entities, demonstrating persistent targeting despite available sec
Two Russia-aligned cyber attack campaigns have continued to exploit a security flaw in WinRAR to target Ukrainian organisations, almost a year after patches for the vulnerability were released. The activity has been attributed by Trend Micro to Earth Dahu (aka Gamaredon) and SHADOW-EARTH-066 (aka UAC-0226). It involves the exploitation of CVE-2025-8088, a path traversal flaw that allows an
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
