ClosedPatched
Day · Aug 2, 2023
WinRAR zero-day used against traders, then state hackers (CVE-2023-38831)
RARLAB WinRAR
Updates on Aug 2, 2023
WinRAR 6.23 released with the fix
Source
Summary
WinRAR before 6.23 would run hidden code when a user opened what looked like a harmless file inside a ZIP. Group-IB found it exploited since April 2023 to target traders. After the fix, Google TAG saw Russian and Chinese government-backed groups pile on.
Read the full incident →