Government-backed actors exploiting WinRAR vulnerability Google's Threat Analysis Group analyzes recent state-sponsored campaigns exploiting the WinRAR vulnerability, CVE-2023-38831. Source: The Official Google Blog