High-severity WinRAR 0-day exploited for weeks by 2 groups

Two Russian cybercrime groups exploited a high-severity zero-day in WinRAR, allowing backdoor access to computers opening malicious archives. ESET detected the attacks on July 18, and a fix was released six days later.