The list of threat actors abusing a vulnerability in WinRAR that was first discovered last spring is continuing to grow, with the latest addition being APT29, a Russian state-sponsored threat actor also known as Cozy Bear or NOBELIUM.
This is according to the Ukrainian National Security and Defense Council (NDSC), which claims that it observed APT29 targeting government agencies with phishing emails that exploited CVE-2023-38831, BleepingComputer reports.
