Earth Dahu, SHADOW-EARTH-066
Unknown Dormant
- Mentions
- 1
- First seen
- 09 Jun 2026
- Last seen
- 09 Jun 2026
Relevant to you · Relevant
- Sector / region:
- DACH
Origin
Unattributed
Profile
Earth Dahu (SHADOW-EARTH-066) is a Russia-aligned group exploiting a WinRAR vulnerability to deploy stealer malware in Ukraine. The attacks aim to steal sensitive information from compromised systems. The group operates in Russia's interest and focuses on Ukrainian targets.
Affected vendors
Rarlab
Targeted regions
Eastern Europe
Targeted countries
Ukraine
Associated malware / tools
Stealer
Linked CVEs
- CVE-2025-8088 KEV CVSS 8.8 EPSS 12%
Related actors
Share a CVE, technique or malware with this actor.