Russian Gorbag Threat Group Exploits WinRAR Flaw for Data Theft in Ukraine

A Russia-aligned threat actor named Gorbag is targeting Ukrainian defense and law enforcement entities using information stealers. The campaign leverages a known WinRAR vulnerability to deploy malware and harvest sensitive data. Administrators should ensure archiving software is fully patched and monitor endpoints for unauthorized execution.