#CVE-2018-20250
Vulnerability/Target
2019-03-26 • WinRAR Zero-day Abused in Multiple Campaigns
A WinRAR path-traversal vulnerability exploited in a Lazarus-attributed spear-phishing attack against an Israeli defense-industry company. A crafted ACE-format archive placed a malicious executable in a targeted user’s Windows startup folder.
-
4
Tagged Reports
-
4
Unique Authors
-
664
Active Days