+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: China-Linked Amaranth-Dragon Exploits WinRAR Flaw in Espionage Campaigns (/showthread.php?tid=6319761)
China-Linked Amaranth-Dragon Exploits WinRAR Flaw in Espionage Campaigns - Stanley - Feb 13, 2026
China-Linked Amaranth-Dragon Exploits WinRAR Flaw in Espionage Campaigns
Threat actors affiliated with China have been attributed to a fresh set of cyber espionage campaigns targeting government and law enforcement agencies across Southeast Asia throughout 2025.
Check Point Research is tracking the previously undocumented activity cluster under the moniker Amaranth-Dragon, which it said shares links to the APT 41 ecosystem. Targeted countries include Cambodia,
https://thehackernews.com/2026/02/china-linked-amaranth-dragon-exploits.html
RE: China-Linked Amaranth-Dragon Exploits WinRAR Flaw in Espionage Campaigns - Moooookie - Feb 22, 2026
Winrar bugs still getting used for espionage merely shows that old software is still low hanging fruit for serious groups
RE: China-Linked Amaranth-Dragon Exploits WinRAR Flaw in Espionage Campaigns - shakur123 - Feb 22, 2026
Classic tradecraft — exploit a common tool, rely on slow patch cycles, and target regions with uneven defensive maturity.
If it’s tied to APT41 lineage, this likely isn’t smash-and-grab — more long-term access and quiet persistence.