Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

ClosedPatched

Day · Aug 24, 2023

WinRAR zero-day used against traders, then state hackers (CVE-2023-38831)

RARLAB WinRAR

Follow this incident

Updates on Aug 24, 2023

  1. CISA adds CVE-2023-38831 to the KEV catalog

Summary

WinRAR before 6.23 would run hidden code when a user opened what looked like a harmless file inside a ZIP. Group-IB found it exploited since April 2023 to target traders. After the fix, Google TAG saw Russian and Chinese government-backed groups pile on.

Read the full incident →

Advisories3