news.mlab.sh
2 results
threat-intel

Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine

The Gamaredon group is exploiting a WinRAR vulnerability (CVE-2025-8088) to deploy a multi-stage malware campaign targeting Ukraine. This campaign utilizes GammaWorm and GammaSteel, designed for data theft and persistence, leveraging Telegram for command and control, and exfiltrating data to AWS S3. The sophisticated n…

The Hacker News · Jun 2, 2026 High