Do Son Google's TAG identified multiple state-sponsored hacking groups actively leveraging a known vulnerability (CVE-2023-38831) in WinRAR
FROZENBARENTS
2023Q1 saw these phishing campaigns primarily target Ukrainian users, accounting for over 60% of the observed Russian cyber activity