Phishing emails with RAR archives exploit Linux filename injection to deliver VShell backdoor, bypassing antivirus defenses
  • SSUPII@sopuli.xyzEnglish
    1·
    2 months ago

    I don’t see why the archive is important at all here, other than file naming limitations.

    The weak point is from other automated scripts not sanitising the file list when such a file is present, not from the extraction of the archive.

    I really am seeing a nothing burger here.