tldrdailynews.com logo

WinRAR's Security Vulnerability Exploited by Russian and Chinese Hackers

1 min read
Source: TechCrunch
WinRAR's Security Vulnerability Exploited by Russian and Chinese Hackers
Photo: TechCrunch
TL;DR

Google security researchers have discovered evidence that government-backed hackers linked to Russia and China are exploiting a previously patched vulnerability in WinRAR, a popular archiving tool for Windows. The vulnerability, known as CVE-2023-38831, allows attackers to hide malicious scripts in archive files. Despite an updated version of WinRAR being released, multiple state-backed hacking groups, including Sandworm and Fancy Bear from Russia, and APT40 from China, have been observed exploiting the flaw in targeted phishing campaigns. The ongoing exploitation of this bug highlights the effectiveness of known vulnerability exploits due to slow patching rates.

Topics:top-newscybersecurity#china#cybersecurity#government-backed-hackers#russia#winrar#zero-day-vulnerability
Share this article
  1. Russia and China-backed hackers are exploiting WinRAR zero-day bug  TechCrunch
  2. PSA: it's time to update WinRAR due to a big security vulnerability  The Verge
  3. Google links WinRAR exploitation to Russian, Chinese state hackers  BleepingComputer
  4. You Need to Update WinRAR, Right Now  Gizmodo
  5. WinRAR has a major security vulnerability, manually update now  XDA Developers

Want the full story? Read the original reporting

Read on TechCrunch