Tag: hta infection chain

1 Attack Reports | 0 Vulnerabilities

Attack reports

Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open

Two Russia-aligned campaigns continue exploiting CVE-2025-8088, a WinRAR path traversal vulnerability patched in July 2025, against Ukrainian organizations through April 2026. SHADOW-EARTH-066 deploys an evolved GIFTEDCROOK information stealer using in-memory DLL loading via direct NT system calls,…
credential theft
information stealer
gammasteel
giftedcrook
CVE-2025-8088
ukraine targeting
winrar exploitation
2026-06-08
giftedcrook stealer
hta infection chain
russia-aligned threats
Published: June 8, 2026
Linked vulnerabilities : CVE-2025-8088, CVE-2025-6218, CVE-2018-20250
Downloadable IOCs: 50
Click here to see more Attack Reports