Gorbag Hackers Exploit WinRAR Vulnerability to Steal Credentials From Ukrainian Government Agencies
Gorbag uses CVE-2025-8088 in WinRAR to deliver BeautyStealer for credential theft from Ukrainian targets since February 2025.
Stories per day · 30 days
2 RSS
2 stories, newest first · one card per story
Stories tagged #beautystealer
Gorbag APT exploits WinRAR CVE-2025-8088 to deploy BeautyStealer
Russia-aligned Gorbag APT deploys BeautyStealer infostealer via WinRAR flaw in spearphishing emails against Ukrainian law enforcement and government targets.