Elfin: Relentless Espionage Group Targets Multiple Organizations in Saudi Arabia and U.S.

In a recent wave of attacks during February 2019, Elfin attempted to exploit a known vulnerability (CVE-2018-20250) in WinRAR, the widely used file archiving and compression utility capable of creating self-extracting archive files.

However, prior to this attempted attack, Symantec had rolled out proactive protection against any attempt to exploit this vulnerability (Exp.CVE-2018-20250).

Exp.CVE-2018-20250