If you use WinRAR, it\u2019s time to update to the latest version after a serious security vulnerability has been discovered that\u2019s already in use by attackers. Google\u2019s Threat Analysis Group (TAG) has found that multiple government-backed hacking groups have been exploiting the WinRAR vulnerability since early 2023.<\/p>\n<\/div>\n
\u201cA patch is now available, but many users still seem to be vulnerable,\u201d says TAG in a blog post<\/a> detailing the WinRAR exploit. \u201cTAG has observed government-backed actors from a number of countries exploiting the WinRAR vulnerability as part of their operations.\u201d<\/p>\n<\/div>\n WinRAR versions 6.24<\/a> and 6.23 both include a fix for the security hole, but the app doesn\u2019t update automatically, so you\u2019ll have to manually download and install the patch. That\u2019s right, it\u2019s 2023, and one of the most popular Windows apps still doesn\u2019t have an auto-update feature. <\/p>\n<\/div>\n The WinRAR vulnerability allows attackers to execute arbitrary code when a Windows user opens something like a PNG file within a ZIP archive. TAG describes the security exploit as \u201ca logical vulnerability within WinRAR causing extraneous temporary file expansion when processing crafted archives, combined with a quirk in the implementation of Windows\u2019 ShellExecute when attempting to open a file with an extension containing spaces.\u201d<\/p>\n<\/div>\n The exploit has been used by attackers since early 2023<\/p>\n<\/div>\n<\/div>\n The exploit has also been used to target<\/a> cryptocurrency trading accounts since April 2023. \u201cThe widespread exploitation of the WinRAR bug highlights that exploits for known vulnerabilities can be highly effective, despite a patch being available,\u201d says TAG. \u201cThese recent campaigns exploiting the WinRAR bug underscore the importance of patching and that there is still work to be done to make it easy for users to keep their software secure and up-to-date.\u201d<\/p>\n<\/div>\n This isn\u2019t the first time a major WinRAR vulnerability has been discovered. In 2019, cybersecurity company Check Point Research discovered<\/a> a 19-year-old code execution exploit that could give attackers full control over a victim\u2019s computer.<\/p>\n<\/div>\n