Solve the vulnerability to not yet be punched again. 🚨

After a few months, there was a serious vulnerability in WinRAR version 7.11 (CVE-2025-6218) that opened the way for hackers to embed malicious code into .RAR files, and just accidentally cracked the file, there was an immediate chance of being hit, which was just solved in version 7.12.

.

The latest has yet to be found. This time, it is even heavier because it is Zero-day. The CVE-2025-8088 code is actually hacked by the Russian RomCom group. This vulnerability is a Path Traversal that allows a specially created .RAR file to break a file to a hacker's designated location, such as the Windows Startup folder. When the victim opens the file, the malware will be automatically run on the next launch, allowing the attacker to remotely control the machine (similar to the original patch).

.

ESET discovered and informed the WinRAR development team before issuing a patch to solve version 7.13 on July 30, 2025, but the problem is that WinRAR does not have an automatic update system. Users have to download and install it themselves from the official website. Anyone who is still using version older than 7.13 now has a very high risk should update immediately.

.

The RomCom group, also known as Storm-0978 and Tropical Scorpius, is a group of hackers with a history of using the Zero-day vulnerability and developing custom malware to make backdoors and steal data. They were involved in ransomware attacks like Cuba and Industrial Spy. So anyone using WinRAR on Windows has to check the version and update it quickly. Just one compressed file can open the door for the unsub to enter your machine.

.

Source: neowin

# IT # Includes IT matters # Cough to know