Users who have not updated the WinRAR patch, despite being warned, continue to take advantage of the vulnerability to insert malicious code.
WinRAR programmers have released a patch update on version 5.70 beta 1, but because many users do not update to the latest version, the problem is not resolved at the root.
WinRAR, data compression and decompression software, is one of the most popular software for any computer user. Earlier this month, CheckPoint Software's security experts announced a serious vulnerability that lasted 19 years on WinRAR software, and hackers could easily take advantage of it to spread malicious code.
WinRAR programmers have released a patch update on version 5.70 beta 1, but because many users do not update to the latest version, the problem is not resolved at the root. Hackers can continue to take advantage of this vulnerability to embed malicious code in a compressed file, when the user decompresses the malicious code, it will be started and run in the background.
To easily deceive users into downloading and extracting, hackers have embedded malicious code into sexy photos to stimulate their curiosity. Hackers used this flaw to attack Middle Eastern countries or Korean government agencies before the day when the US-Trieu summit took place in Vietnam.
Once again, security experts recommend users to quickly update to the latest version of WinRAR 5.70 Beta 1 from their official website, and away from ACE-formatted files and image files. Sexy on the Internet to protect yourself.
- https://www.win-rar.com/affdownload/download.php
- Detecting new malware on WinRAR can infiltrate computers and steal data
- Warning of new malware appear like Wannacry, capable of deleting Vietnamese percussion on computer
- Find bug in Emotet malware, prevent it from spreading for 6 months
- Warning: The new Facebook virus, a malicious code that is spreading rapidly through Messenger
- Dell computers became victims of RCE attacks by vulnerabilities in SupportAssist
- Microsoft updated Patch Tuesday in October 2020, patching the 'Ping of Death' vulnerability on Windows 10