Bleeping Computer

Clever ‘File Archiver In The Browser’ phishing trick uses ZIP domains

A new 'File Archivers in the Browser' phishing kit abuses ZIP domains by displaying fake WinRAR or Windows File Explorer windows in the browser to convince users to launch malicious files. Earlier ...
Bleeping Computer

7-zip now supports Windows ‘Mark-of-the-Web’ security feature

7-zip has finally added support for the long-requested 'Mark-of-the-Web' Windows security feature, providing better protection from malicious downloaded files. When you download documents and ...
Ars Technica

Microsoft is scanning the inside of password-protected zip files for malware

Microsoft cloud services are scanning for malware by peeking inside users’ zip files, even when they’re protected by a password, several users reported on Mastodon on Monday. Compressing file contents ...
Ars Technica

Why does Windows store ZIP passwords?

While Windows doesn't give you the ability to create encrypted ZIP files, software like 7Zip does. If you choose the standard ZIP encryption (weak encryption) when making the ZIP file, then Windows ...
Dark Reading

Google's .zip, .mov Domains Give Social Engineers a Shiny New Tool

Two new top-level domain names — .zip and .mov — have caused concern among security researchers, who say they allow for the construction of malicious URLs that even tech-savvy users are likely to miss ...
ZDNet

These file types are the ones most commonly used by hackers to hide their malware

ZIP and RAR files have overtaken Office documents as the file most commonly used by cyber criminals to deliver malware, according to an analysis of real-world cyber attacks and data collected from ...