Analysis of Gamaredon campaign targeting Ukraine weaponizing CVE-2025-8088

Reported 19 Jun 2026 by otx · Severity: medium

A campaign exploiting the WinRAR path-traversal vulnerability CVE-2025-8088 has been actively targeting Ukraine since February 2026, with ongoing activity through June 2026. The operation uses Ukrainian military and conscription-themed documents as lures, distributed as RAR archi