Tag: zero-day

• ForensicsS
• 0 Comments

WinRAR zero-day flaw exploited by RomCom hackers in phishing attacks

Private investigator A lately mounted WinRAR vulnerability tracked as CVE-2025-8088 became once exploited as a nil-day in phishing attacks to install the RomCom malware. The flaw is a directory traversal vulnerability that became once mounted in WinRAR 7.13, which permits specially crafted archives to extract data into a file path selected by the attacker. “When extracting a file, […]