Israeli researcher Danor Cohen has discovered a security flaw in WinRAR, IntelCrawler confirmed was exploited in cyber espionage campaign. An attacker could compress a malicious code and masquerade it as an innocent ZIP file containing any harmless content. A similar exploit is excellent to conduct undercover cyber espionage campaigns, experts have observed that bad actors are exploiting the vulnerability in a series of attacks against military subcontractors, embassies, aerospace corporations and companies from the Fortune Global 500 list. The vulnerability was analyzed by IntelCrawlers experts which confirmed that it can be exploited on all versions of WinAR.”]
Source: https://securityaffairs.co/wordpress/23623/hacking/winrar-zero-day.html