WinRAR 0-Day Vulnerability Actively Exploited for Weeks by RomCom and Paper Werewolf
tets
Currently, being taken advantage of by two Russian cybercrime groups is a major zero-day flaw in the most widely used WinRAR file compression program. Some of these attacks are customized to particular targets; they are meant to backdoor computers that open dangerous files attached to phishing emails.
ESET said on Monday that these attacks were first identified on the 18th of July when a file was found in an unusual path directory. ESET determined by July 24 that this behavior was linked to the abuse of an undetected flaw in WinRAR, a file compression application with a reported installed user base of about 500 million. On the same day, ESET notified the WinRAR developers; six days later, a patch was published.
Within Windows, the WinRAR 0-day vulnerability appeared to have an amazin...