Threat actor
Amaranth-Dragon
China
Tracked by CyberSIXT since 4 Feb
- Articlesall time
- 4
- Articleslast 30 days
- 0
- CVEs exploitedattributed · all time
- 1
- Research reportsall time
- 0
4 articles from 4 outlets since 4 Feb; the latest 263 days ago.
- Article
- First report
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Thu 5 Feb · 10:50 UTC | Security Affairs | China-linked Amaranth-Dragon hackers target Southeast Asian governments in 2025 |
| Thu 5 Feb · 03:26 UTC | SecurityOnline | 10 Days to Exploit: Amaranth-Dragon Weaponizes WinRAR Flaw to Spy on SE Asia |
| Wed 4 Feb · 15:10 UTC | The Hacker News | China-Linked Amaranth-Dragon Exploits WinRAR Flaw in Espionage Campaigns |
| Wed 4 Feb · 14:05 UTC | Check Point | Amaranth-Dragon: Weaponizing CVE-2025-8088 for Targeted Espionage in the Southeast Asia |
Who reported 4 outlets
- Check Point1
- The Hacker News1
- SecurityOnline1
- Security Affairs1
) : ""}
Names and sources
- Amaranth-Dragon
- CyberSIXT coverage, Malpedia, MISP Galaxy
Attributed facts
- Origin
China MISP Galaxy
CVEs exploited
1 CVE an article attributes to Amaranth-DragonCVE-2025-8088RARLAB WinRAR Path Traversal Vulnerability · attributed by Check Point Research, 4 Feb · Source articleCVSS8.4HighExploited95%EPSS20articles
Vendors targeted
MITRE ATT&CK® techniques
No MITRE ATT&CK® techniques are recorded for Amaranth-Dragon.
- China-linked Amaranth-Dragon hackers target Southeast Asian governments in 2025Security Affairs
- 10 Days to Exploit: Amaranth-Dragon Weaponizes WinRAR Flaw to Spy on SE AsiaSecurityOnline
- China-Linked Amaranth-Dragon Exploits WinRAR Flaw in Espionage CampaignsThe Hacker News
- Amaranth-Dragon: Weaponizing CVE-2025-8088 for Targeted Espionage in the Southeast AsiaCheck Point · first in our coverage