New Hacking Campaign Exploits Microsoft Windows WinRAR Vulnerability

Check Point researchers observed a targeted cyber-espionage campaign (Amaranth-Dragon) rapidly weaponizing CVE-2025-8088 — a WinRAR path-traversal vulnerability — to deliver malicious archives via tailored phishing lures to government and law enforcement victims in Southeast Asia; attackers used legitimate cloud hosting, geo-restricted infrastructure, and the Havoc C2 framework to maintain stealth and persistence.