techend
By Tanveer Ahmed :
Pakistan’s National Cyber Emergency Response Team (NCERT) has issued a high-priority cybersecurity warning after the discovery of a serious vulnerability in the widely used file compression software WinRAR, raising concerns over potential cyberattacks targeting both public and private sector organisations across the country.
The vulnerability, identified globally as CVE-2025-8088, affects the UnRAR.dll component of WinRAR and impacts Windows versions up to and including version 7.12. According to the advisory, hackers could exploit the flaw by distributing specially crafted archive files that, once opened by unsuspecting users, may allow attackers to execute malicious code on targeted systems without requiring administrative privileges.
Cybersecurity officials warned that the issue poses a significant threat due to the extensive use of WinRAR in offices, government departments and businesses for handling compressed files and data archives. The advisory stated that attackers could gain long-term access to compromised systems by planting harmful files in sensitive Windows directories, including startup folders that automatically run programs during system boot.
Authorities explained that the vulnerability involves a path traversal weakness capable of manipulating memory functions inside the operating system. This enables attackers to place malware in restricted locations and potentially maintain persistent control over infected devices. Experts fear such exploits could be used for espionage, ransomware deployment, data theft or wider network intrusions.
Following the federal alert, the Sindh government’s Science and Information Technology Department circulated the advisory to all provincial ministries, administrative offices and law enforcement agencies, directing them to immediately upgrade all WinRAR installations to version 7.13 or later.
Departments have also been instructed to inspect startup programs and active services within 24 hours to identify and remove any suspicious or unauthorised files that may have been installed through exploitation attempts. Officials stressed that failure to patch vulnerable systems could expose institutions to severe cybersecurity incidents.
NCERT further advised organisations and individual users to scan all compressed files with updated antivirus software before opening them, avoid downloading archives from untrusted sources and ensure software updates are obtained only from official platforms. The agency also urged IT administrators to monitor systems for unusual behaviour that may indicate compromise.
The warning comes amid growing concerns over cyber threats facing Pakistan’s digital infrastructure. In recent years, public institutions, businesses and telecom operators have increasingly become targets of malware campaigns, phishing attacks and ransomware operations as the country expands its digital services and online connectivity.
Cybersecurity experts note that archive utilities such as WinRAR remain popular targets for hackers because they are installed on millions of systems worldwide. Vulnerabilities in file extraction tools can provide attackers with an effective route to infiltrate computers simply by convincing users to open infected compressed files received through email attachments, messaging platforms or downloads.
Global cybersecurity researchers have repeatedly warned that many users delay software updates, leaving systems exposed for extended periods after vulnerabilities become publicly known. Experts say rapid patch management is now one of the most important defences against cyberattacks, especially for organisations handling sensitive government or corporate data.
The latest advisory also reflects increasing efforts by Pakistani authorities to strengthen national cyber resilience as digital transformation accelerates across government services, telecom infrastructure and financial systems. Officials have encouraged all organisations to maintain updated cybersecurity practices, conduct regular system audits and educate employees about potential online threats.
NCERT said any public sector department detecting suspicious activity or evidence of compromise should immediately report the incident through official emergency reporting channels to ensure swift response and containment measures.
About The Author
