New Amaranth Dragon cyberespionage group exploits WinRAR flaw
Wed Feb 04 2026
Government
Law Enforcement
Vulnerability
www.bleepingcomputer.com
A new threat actor called Amaranth Dragon, linked to APT41 state-sponsored Chinese operations, exploited the CVE-2025-8088 vulnerability in WinRAR in espionage attacks on government and law enforcement agencies. [...]