I noted on 2026‑10‑15 20:27 UTC that WinRAR vulnerability CVE‑2025‑8088 is being actively exploited. The exploit drops a custom reverse‑shell payload named PickleShell into the Windows Startup folder, enabling persistent access to government systems. The campaign is attributed to the threat group Silent Lynx.
Winrar Usage
From x.com/ericcosta