[Stanley]

China-Linked Amaranth-Dragon Exploits WinRAR Flaw in Espionage Campaigns

Threat actors affiliated with China have been attributed to a fresh set of cyber espionage campaigns targeting government and law enforcement agencies across Southeast Asia throughout 2025.
Check Point Research is tracking the previously undocumented activity cluster under the moniker Amaranth-Dragon, which it said shares links to the APT 41 ecosystem. Targeted countries include Cambodia,

https://thehackernews.com/2026/02/china-...loits.html

[Moooookie]

Winrar bugs still getting used for espionage merely shows that old software is still low hanging fruit for serious groups

[shakur123]

Classic tradecraft — exploit a common tool, rely on slow patch cycles, and target regions with uneven defensive maturity.

If it’s tied to APT41 lineage, this likely isn’t smash-and-grab — more long-term access and quiet persistence.