Update WinRAR tools now: RomCom and others exploiting zero-day vulnerability

ESET discovered RomCom exploiting a previously unknown WinRAR zero-day (CVE-2025-8088) via ADS-based path traversal in July 2025 to silently extract malicious LNK and DLL/EXE files from spearphishing RAR attachments; the campaign targeted financial, manufacturing, defense, and logistics organizations in Europe and Canada and delivered multiple backdoors (Mythic agent, SnipBot variant, RustyClaw/MeltingClaw).