Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware

Russia-aligned threat actor Gorbag has been using information stealer malware in attacks on Ukrainian organizations since at least February 2025, according to ESET researchers. The group targets law enforcement, justice entities, local administrations near the front line, and the defense sector, exploiting a WinRAR flaw to deploy data-stealing malware.