Grave falla in 7-Zip

Basta aprire un archivio per eseguire codice malevolo.
Una nuova vulnerabilità in 7‑Zip sta esponendo milioni di sistemi al rischio di esecuzione di codice malevolo semplicemente aprendo un archivio appositamente manipolato

#7zip #malware #vulnerabilitacritiche

#freesoftware #opensource

https://www.zeusnews.it/n.php?c=32123

Reloaded in a modern Remcos RAT Infection

Analysts discovered a new Remcos RAT infection chain starting with a batch file executing encoded commands that creates hidden directories and retrieves encrypted payloads. Unlike earlier campaigns relying on PowerShell-hosted .NET loaders, this variant incorporates DonutLoader shellcode and AutoIt-based staging for in-memory payload delivery. The infection begins with a phishing email containing a malicious batch file named Bestellung.CMD. The chain abuses legitimate Windows utilities including cscript.exe and SyncAppvPublishingServer.vbs to execute Base64-encoded payloads. Additional components are downloaded from cloud storage, including 7Zip tools and password-protected archives containing obfuscated JScript. The final payload consists of DonutLoader shellcode that injects Remcos RAT version 7.2.1 Pro into colorcpl.exe, enabling remote control, credential harvesting, keystroke logging, and additional payload deployment.

Pulse ID: 6a1a2dd905d9f8c4474cb45e
Pulse Link: https://otx.alienvault.com/pulse/6a1a2dd905d9f8c4474cb45e
Pulse Author: AlienVault
Created: 2026-05-30 00:22:49

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#7Zip #Autoit #Cloud #CredentialHarvesting #CyberSecurity #Email #InfoSec #NET #OTX #OpenThreatExchange #Password #Phishing #PowerShell #RAT #Remcos #RemcosRAT #ShellCode #VBS #Windows #Word #ZIP #bot #AlienVault

7-Zip'te kritik güvenlik açığı keşfedildi! 🚨 Yüz milyonlarca sistem risk altında. Uzmanlar, vakit kaybetmeden güncelleme yapılmasını öneriyor. Dijital güvenliğiniz için hemen harekete geçin!

🚩 #7Zip #SiberGüvenlik #GüvenlikAçığı #GüncellemeŞart

7-Zip Security Update, Fine for Temu, Data Breach at Pick 'n Pay

More Tech Info: https://signal.group/#CjQKIKHCQRXvu7S5CPLmEiyQb0JBB1N7mqjnZ59ddO2JujW_EhCCAnLTEuipyW0JwTmgQrIE

#7zip #Temu #PicknPay #PnP #ITNews #EU #DSA #Dataleak #OnlineShopping #Security #Privacy

🔒 7-Zip ha corretto una falla critica, ma chi non aggiorna resta esposto: verifica la versione e installa subito l’ultima release. #Cybersecurity #7Zip

🔗 https://www.tomshw.it/hardware/7-zip-falla-cve-2026-48095-esecuzione-codice

Nutzt hier jemand 7-zip

Na, dann mal schnell die sicherheitsaktualisierung installieren!