instal the new version for ipod WinRAR 6.23

There was one more vulnerability found in WinRAR, an issue when processing malicious recovery volumes.

The one documented case only lost $2 worth of dogecoin.

The user tries to open the image, but because the zip is malformed, the WinRAR function gets confused and opens the script instead.īased on a user’s story from one of those forums, it appears that the end goal was to break into the brokers’ trading accounts, and funnel money into attacker accounts. A rigged zip file is created with identically named image file and folder containing a script. The vulnerability itself is interesting, too. They were researching a malware known as DarkMe, and found an attack on WinRAR being used in the wild, using malicious ZIP files being spread on a series of web forums for traders.Īmong the interesting tidbits of the story, apparently at least one of those forums locked down the users spreading the malicious files, and they promptly broke into the forum’s back-end and unlocked their accounts. This work comes from Group-IB, another cybersecurity company with a research team. So what does WinRAR, day trading, and Visual Basic have in common? If you guessed “elaborate malware campaign aimed at investment brokers”, then you win the Internet for the day.

Instal the new version for ipod WinRAR 6.23