⚠️ WinRAR 0day abused in phishing to deploy RomCom malware

WinRAR’s zero-day flaw (CVE-2025-8088), fixed in v7.13, was used in phishing RAR files to drop executables into Startup folders, triggering RomCom malware on login.

RomCom (aka UNC2596) is a Russia-linked group behind ransomware and data theft. Update ASAP.
#ransomNews #RomCom #WinRARFlaw

Credit - ransomNews