A security flaw in WinRAR is being exploited by Russia-aligned groups to target Ukrainian organizations. The vulnerability, which was patched almost a year ago, is still being used in cyber attack campaigns. The groups, identified as Earth Dahu and SHADOW-EARTH-066, are using the flaw to deploy stealers in Ukraine. The activity involves exploiting a path traversal flaw that allows an attack. The exploitation of this flaw highlights the ongoing threat to Ukrainian organizations from Russia-aligned groups, despite patches being available for nearly a year.

AI summaries can be wrong sometimes—always verify important details using the source article.