Cybersecurity News in Asia

RECENT STORIES:

SEGA moves faster with flow-based network monitoring
Futurise Unveils 2024 Impact Report: Shaping Tomorrow’s Regulato...
Raythink Technology Showcases Next-Generation All-Round Security Syste...
Android trojan mimics human typing traits to evade behavioral detectio...
Embedding cybersecurity culture in financial institutions: lessons in ...
Upgrading biometric authentication system protects customers in the Ph...
LOGIN REGISTER
CybersecAsia
  • Features
    • Featured

      Embedding cybersecurity culture in financial institutions: lessons in leadership, collaboration, and cyber resilience

      Embedding cybersecurity culture in financial institutions: lessons in leadership, collaboration, and cyber resilience

      Thursday, October 30, 2025, 11:37 AM Asia/Singapore | Features, Newsletter
    • Featured

      Biometrics and the digital identity crisis today

      Biometrics and the digital identity crisis today

      Tuesday, October 28, 2025, 3:30 PM Asia/Singapore | Features
    • Featured

      Collaboration and data security for today’s agentic workspace

      Collaboration and data security for today’s agentic workspace

      Wednesday, October 22, 2025, 1:42 PM Asia/Singapore | Features, Tips
  • Opinions
  • Tips
  • Whitepapers
  • Awards 2025
  • Directory
  • E-Learning

Select Page

News

Critical zero-day exploits dormant WinRAR vulnerability to target global Windows systems

By CybersecAsia editors | Tuesday, August 12, 2025, 4:41 PM Asia/Singapore

Critical zero-day exploits dormant WinRAR vulnerability to target global Windows systems

A flaw in WinRAR utility could, if left unpatched, allow cybercriminals to deploy malware via malicious archives and phishing campaigns.

What happens when a ubiquitous little file archival/unzipping tool lays dormant in millions of Windows computer systems around the world, un-updated for years — and then suddenly a high criticality zero day exploit is suddenly unleashed on the unsuspecting world?

The tool being referred to is Winrar, and a critical zero-day vulnerability (CVE-2025-8088, CVSS score 8.8) in the widely used file archiving tool has recently been exploited in active cyberattack campaigns, putting millions of systems at risk.

The software flaw is a path traversal vulnerability affecting Windows versions and their software components, such as the UnRAR.dll and command-line utilities.

This vulnerability allows attackers to craft malicious archive files that appear harmless but contain hidden alternate data streams (ADSes) that deploy malware during extraction.

Discovered by ESET researchers in mid-July 2025, and promptly patched in WinRAR version 7.13 by end-July, the vulnerability enables attackers to silently write malicious files outside the intended extraction folder — such as placing payloads in the Windows startup directory — enabling persistence through automatic execution upon system boot.

The Russia-aligned cyber threat group RomCom has been observed exploiting this zero-day in targeted spear-phishing campaigns aimed at financial, manufacturing, defense, and logistics firms across Europe and Canada. The attacks use resume-themed lures to trick victims into opening booby-trapped RAR attachments. Upon extraction, malicious DLLs and shortcut (LNK) files are deployed; these launch backdoor malware variants including SnipBot, RustyClaw, and Mythic agent, enabling extensive remote control and data exfiltration capabilities.

Additionally, another Russian group known as Paper Werewolf had reportedly leveraged this vulnerability alongside a related directory traversal bug patched in June 2025 to target Russian organizations. The rapid weaponization of this long-dormant yet widespread tool highlights the severe risk posed when critical software remains un-updated.

The incident underscores the need for prompt patching, and caution against opening unsolicited archive attachments, especially in spear-phishing contexts.

Share:

PreviousSurvey finds 57% of respondents had experienced ransomware attacks in past year
NextNexusguard Partners with DIMA to Provide Advanced DDoS Protection Services in Bolivia

Related Posts

Threat alert raised on the latest double-extortion ransomware

Threat alert raised on the latest double-extortion ransomware

Tuesday, June 28, 2022

Fetch up to US0 per Gmail account login credential on the Dark Net

Fetch up to US$150 per Gmail account login credential on the Dark Net

Thursday, April 29, 2021

Wanted: simple, reliable backup and recovery for the cloud era

Wanted: simple, reliable backup and recovery for the cloud era

Tuesday, August 23, 2022

Remote-working risks: 6 security threats to be on guard for

Remote-working risks: 6 security threats to be on guard for

Tuesday, April 14, 2020

Leave a reply Cancel reply

You must be logged in to post a comment.

Voters-draw/RCA-Sponsors

Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
previous arrow
next arrow

CybersecAsia Voting Placement

Gamification listing or Participate Now

PARTICIPATE NOW

Vote Now -Placement(Google Ads)

Top-Sidebar-banner

Whitepapers

  • 2024 Insider Threat Report: Trends, Challenges, and Solutions

    2024 Insider Threat Report: Trends, Challenges, and Solutions

    Insider threats continue to be a major cybersecurity risk in 2024. Explore more insights on …Download Whitepaper
  • AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    The future of cybersecurity is a perfect storm: AI-driven attacks, cloud expansion, and the convergence …Download Whitepaper
  • Data Management in the Age of Cloud and AI

    Data Management in the Age of Cloud and AI

    In today’s Asia Pacific business environment, organizations are leaning on hybrid multi-cloud infrastructures and advanced …Download Whitepaper
  • Mitigating Ransomware Risks with GRC Automation

    Mitigating Ransomware Risks with GRC Automation

    In today’s landscape, ransomware attacks pose significant threats to organizations of all sizes, with increasing …Download Whitepaper

Middle-sidebar-banner

Case Studies

  • Upgrading biometric authentication system protects customers in the Philippines: UnionDigital Bank

    Upgrading biometric authentication system protects customers in the Philippines: UnionDigital Bank

    An improved dual-liveness biometric framework can counter more deepfake threats, ensure compliance, and protect underbanked …Read more
  • HOSTWAY gains 73% operational efficiency for private cloud operations  

    HOSTWAY gains 73% operational efficiency for private cloud operations  

    With NetApp storage solutions, the Korean managed cloud service provider offers a lean, intelligent architecture, …Read more
  • CISOs can navigate emerging risks from autonomous AI with a new security framework

    CISOs can navigate emerging risks from autonomous AI with a new security framework

    See how security leaders can adopt layered strategies addressing intent, governance, and oversight to manage …Read more
  • MoneyMe strengthens fraud prevention and credit decisioning

    MoneyMe strengthens fraud prevention and credit decisioning

    Australian fintech strengthens risk management with SEON to scale lending operations securely and efficiently.Read more

Bottom sidebar

  • Our Brands
  • DigiconAsia
  • MartechAsia
  • Home
  • About Us
  • Contact Us
  • Sitemap
  • Privacy & Cookies
  • Terms of Use
  • Advertising & Reprint Policy
  • Media Kit
  • Subscribe
  • Manage Subscriptions
  • Newsletter

Copyright © 2025 CybersecAsia All Rights Reserved.