CERT24Russia-aligned groups exploit WinRAR flaw to deploy stealers in UkraineLoading data…
CERT24Threat Observatory
Period

Russia-aligned groups exploit WinRAR flaw to deploy stealers in Ukraine

According to Trend Micro, two Russia-aligned cyberattack campaigns have continued exploiting CVE-2025-8088 against Ukrainian organisations nearly a year after fixes were released. The activity has been attributed to Earth Dahu, also known as Gamaredon, and SHADOW-EARTH-066, also known as UAC-0226.

← Back to intelligence

Russia-aligned groups exploit WinRAR flaw to deploy stealers in Ukraine

According to Trend Micro, two Russia-aligned cyberattack campaigns have continued exploiting CVE-2025-8088 against Ukrainian organisations nearly a year after fixes were released. The activity has been attributed to Earth Dahu, also known as Gamaredon, and SHADOW-EARTH-066, also known as UAC-0226.