Gorbag Hackers Exploit WinRAR Vulnerability to Steal Credentials From Ukrainian Government Agencies

Russia-aligned hackers tracked as Gorbag are exploiting a WinRAR vulnerability to steal browser credentials, VPN configurations, and sensitive documents from Ukrainian organizations. Active since at least February 2025, the group targets government agencies, law enforcement bodies, justice institutions, local administrations near the front line, and defense organizations.

The campaign favors quick data theft over extended…

Abbreviated excerpt as provided by the publisher; the full article is at the canonical source. Attributed to Cyber Security News · Limited verification; verify facts against the linked source. Read the full article on cybersecuritynews.com.

Source published: 04 Nov 2026, 07:39 PM IST. Source facts take precedence over AI interpretation.