TI Mindmap HUB
Threat Intelligence Report

Amaranth-Dragon: Weaponizing CVE-2025-8088 for Targeted Espionage in the Southeast Asia

📅 February 14, 2026 📰 research.checkpoint.com 🔍 1 CVE(s) referenced

Amaranth-Dragon, likely linked to APT-41, rapidly weaponized the WinRAR CVE-2025-8088 vulnerability to conduct highly targeted, geo-restricted cyber-espionage campaigns against Southeast Asian government and law enforcement agencies, leveraging custom loaders, Telegram-based RATs, and open-source C2 frameworks for stealthy and persistent access.

vendor
CVE-2025-8088

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle