APT 41, a China-linked advanced persistent threat group, has been leveraging the recently discovered CVE-2025-8088 vulnerability in WinRAR for espionage campaigns targeting Southeast Asian governments. By exploiting this path traversal vulnerability, APT 41 has been able to execute remote code and deploy custom malware, gaining persistent access to sensitive systems.