WinRAR zero-day exploited by state-backed hackers

[Jan]

State-backed hackers exploit flaw in software used by over 500 million people

Google's Threat Analysis Group (TAG) says several state-backed hacking groups are exploiting a high-severity vulnerability in older versions of WinRAR — compression software over 500 million people use.

These attackers aim to gain arbitrary code execution privileges on victims' systems by exploiting the vulnerability.

 

[G.A.S]

I don't think I've used WinRAR (or WinZip, for that matter) even once since I found 7zip?

 

[RonSwanson]

Luckily I never paid for it.

 

[FiestaST]

Take your pic:

 

[backstreetboy]

PSA: it's time to update WinRAR due to a big security vulnerability.

https://www.theverge.com/2023/10/18/23922075/winrar-security-vulnerability-exploit-patch-update If you use WinRAR, it’s time to update to the latest version after a serious security vulnerability has been discovered that’s already in use by attackers. Google’s Threat Analysis Group (TAG) has...

mybroadband.co.za

 

[Nephew_]

I don't think I've used WinRAR (or WinZip, for that matter) even once since I found 7zip?

Came here to say this.

 

[Merlin]

I had to double check that I hadn't opened this thread in Internet Explorer.

WinRAR? It's 2023, fFs!

Did the hackers use a 56k dial-up to accomplish their exploit?