Skip to content
securitytabs

Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware

MentionsESET

A Russia-aligned threat actor known as Gorbag has been observed using simple information stealer malware in attacks targeting Ukrainian organizations. "Active since at least February 2025, the group has focused exclusively on Ukrainian targets, with a clear preference for law enforcement and justice entities, local administrations near the front line, and the defense sector," ESET researcher

Summary from The Hacker News.

Full story2 outlets are covering this story. Read the summary and every outlet's coverage

Explained

The technology and terms in this story. Learn more

Other sources covering the same vulnerabilities or event.

More in Vulnerabilities