The hacktivist group Head Mare has been exploiting a recent WinRAR vulnerability (CVE-2023-38831) to target organizations in Russia and Belarus. This group, linked to the Russo-Ukrainian conflict, uses a range of custom malware and ransomware, including LockBit and Babuk, to disrupt and ransom their victims. Their tactics involve sophisticated phishing attacks and disguise techniques to evade detection.