Inside RemCom’s Latest Evolution: Weaponizing WinRAR Vulnerability CVE-2025-8088 in 2025 Attacks

WinRAR is one of the most popular file compression tools globally, known for its ability to efficiently compress, package and exchange files. In 2025, a critical security vulnerability designated CVE-2025-8088 was discovered in the Windows version of WinRAR. Criminal groups started abusing in, in particular RemCom (also called Tropical Scorpion) updated his TTPs weaponizing the winrar flaw ti archive initial access and persistence on compromized host.