As of January 2026, cybersecurity experts, including Google Threat Intelligence , are reporting active, widespread exploitation of a six-month-old vulnerability in WinRAR.
Nation-state groups and financially motivated cybercriminals are actively using this defect, primarily targeting military, government, and technology sectors for espionage. Gztgbzukbzbuzbgu rar
To ensure your computer is protected, could you confirm if you have recently updated your software, or if you have any suspicious .rar files you'd like to safely scan? High-severity WinRAR 0-day exploited for weeks by 2 groups As of January 2026, cybersecurity experts, including Google
Users must immediately update to the latest version of WinRAR (7.13 or newer) to patch the vulnerability. What is RAR and Why is it Used? As of January 2026
The flaw affects versions of WinRAR prior to 7.13 , which was released in mid-2025.