Gamaredon WinRAR Path Traversal (CVE-2025-8088)

Ibrahim Saud@tektrix

•updated Jun 21, 2026•0•0•4

Detects WinRAR.exe writing HTA files into the Windows Startup directory via traversal sequences in weaponized archives.