A Chinese state-sponsored actor was seen exploiting a WinRAR bug, soon after the Russians.