WinRAR bug found in February is being exploited already!

[Furiku]

WinRAR bug found in February is being used by malicious parties to spread malware already!

 

Quote

One recent example piggybacks on a bootlegged copy of Ariana Grande’s hit album Thank U, Nextwith a file name of ‘Ariana_Grande-thank_u,_next(2019)_[320].rar,’” McAfee Research Architect Craig Schmugar wrote in the post. “When a vulnerable version of WinRAR is used to extract the contents of this archive, a malicious payload is created in the Startup folder behind the scenes. User Access Control (UAC) is bypassed, so no alert is displayed to the user. The next time the system restarts, the malware is run.” -  Craig Schmugar / McAfee

 

One begins to wonder is this just something that affects Pirates in form of Bad Karma and poetic justice... Or are the rest of us gonna get hit too

 

https://arstechnica.com/information-technology/2019/03/nasty-winrar-bug-is-being-actively-exploited-to-install-hard-to-detect-malware/

https://securingtomorrow.mcafee.com/other-blogs/mcafee-labs/attackers-exploiting-winrar-unacev2-dll-vulnerability-cve-2018-20250/

 

[TH3R34P3R]

i'm honestly surprised it took this long since February. but i think i'm not gonna open stuff until its fixed LOL no need to. i have enough stuff as is to do. 

[HarryNyquist]

Or you could use 7zip like a normal person instead of continuing to use WinRAR.

[jagdtigger]

Ppl still use WinRAR?

[Fasterthannothing]

WinRAR that's still around? Haven't used it in forever 7zip is the way to go.

[rcmaehl]

This one?

 

 

[Tsuki]

5 minutes ago, rcmaehl said:

This one?

yes that one.    their new article just says people are now actively exploiting the bug you posted about

[Beskamir]

Welp, guess I better switch to 7zip even though I prefer winrar's ui.