WINRAR ZERO-DAY EXPLOITED TO PLANT MALWARE ON ARCHIVE EXTRACTION

Summary from the TLDR InfoSec newsletter

Researchers from ESET discovered a new WinRAR vulnerability that is being actively exploited in phishing campaigns. Unpatched versions of WinRAR and Windows versions of UnRAR, RAR, and UnRAR.dll can be tricked into using a path specified by a maliciously crafted archive file as the extraction directory. This vulnerability is being exploited by the Russian hacking group RomCom to install malware.