WinRAR zero-day used against traders, then state hackers (CVE-2023-38831) ยท updates https://pwn.watch/i/winrar-zero-day-cve-2023-38831 WinRAR before 6.23 would run hidden code when a user opened what looked like a harmless file inside a ZIP. Group-IB found it exploited since April 2023 to target traders. After the fix, Google TAG saw Russian and Chinese government-backed groups pile on. en Wed, 18 Oct 2023 00:00:00 GMT WinRAR zero-day used against traders, then state hackers (CVE-2023-38831): Google TAG: government-backed actors exploiting the WinRAR bug https://pwn.watch/i/winrar-zero-day-cve-2023-38831 https://pwn.watch/i/winrar-zero-day-cve-2023-38831#2023-10-18-01866142 Wed, 18 Oct 2023 00:00:00 GMT high <p><a href="https://blog.google/threat-analysis-group/government-backed-actors-exploiting-winrar-vulnerability/">Source</a></p> WinRAR zero-day used against traders, then state hackers (CVE-2023-38831): CISA adds CVE-2023-38831 to the KEV catalog https://pwn.watch/i/winrar-zero-day-cve-2023-38831 https://pwn.watch/i/winrar-zero-day-cve-2023-38831#2023-08-24-d9836a3b Thu, 24 Aug 2023 00:00:00 GMT high <p>WinRAR zero-day used against traders, then state hackers (CVE-2023-38831): CISA adds CVE-2023-38831 to the KEV catalog</p> WinRAR zero-day used against traders, then state hackers (CVE-2023-38831): Group-IB: zero-day exploited since April 2023 against traders https://pwn.watch/i/winrar-zero-day-cve-2023-38831 https://pwn.watch/i/winrar-zero-day-cve-2023-38831#2023-08-23-f89cd4aa Wed, 23 Aug 2023 00:00:00 GMT high <p><a href="https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/">Source</a></p> WinRAR zero-day used against traders, then state hackers (CVE-2023-38831): WinRAR 6.23 released with the fix https://pwn.watch/i/winrar-zero-day-cve-2023-38831 https://pwn.watch/i/winrar-zero-day-cve-2023-38831#2023-08-02-bb8a56e9 Wed, 02 Aug 2023 00:00:00 GMT high <p><a href="https://www.rarlab.com/rarnew.htm">Source</a></p>