Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025-8088
https://thehackernews.com/2026/01/google-warns-of-active-exploitation-of.html
Google on Tuesday revealed that multiple threat actors, including nation-state adversaries and financially motivated groups, are exploiting a now-patched critical security flaw in RARLAB WinRAR to establish initial access and deploy a diverse array of payloads.
"Discovered and patched in July 2025, government-backed threat actors linked to Russia and China as well as financially motivated threat actors continue to exploit this n-day across disparate operations," the Google Threat Intelligence Group (GTIG) said.
https://stacker.news/items/1421544
npub1k3…q9t9m
2026-01-28 18:52:01 UTC
Author Public Key
npub1k3qrkfq45qsvyp53hvvv2xk6tt9kfdca9asfvm9nc796dq65948q9q9t9mSeen on
wss://nos.lolPublished at
2026-01-28 18:52:01 UTCEvent JSON
{
"id": "4637a29172f02c85203784b741238cedcb74eceebc23f9905009a46f44c1769e",
"pubkey": "b4403b2415a020c20691bb18c51ada5acb64b71d2f60966cb3c78ba683542d4e",
"created_at": 1769626321,
"kind": 1,
"tags": [
[
"client",
"stacker.news"
]
],
"content": "Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025-8088\nhttps://thehackernews.com/2026/01/google-warns-of-active-exploitation-of.html\n\nGoogle on Tuesday revealed that multiple threat actors, including nation-state adversaries and financially motivated groups, are exploiting a now-patched critical security flaw in RARLAB WinRAR to establish initial access and deploy a diverse array of payloads.\n\n\"Discovered and patched in July 2025, government-backed threat actors linked to Russia and China as well as financially motivated threat actors continue to exploit this n-day across disparate operations,\" the Google Threat Intelligence Group (GTIG) said.\n\nhttps://stacker.news/items/1421544",
"sig": "f2b074c84818b3258f54070a9f8c4de6ee4cc0f998c4f44b733ea0f95d3d6588564272d15fb2a39bf1fac80d74d4e9421ea99f65365dc465588831aa9d6bd58d"
}