WinRAR 0-day that uses poisoned JPG and TXT files
weaponized to rob yuppies since April.

via arstechnica.com:

“A newly discovered zero-day in the widely used WinRAR file-compression program has been exploited for four months by unknown attackers who are using it to install malware when targets open booby-trapped JPGs and other innocuous inside file archives.

The vulnerability, residing in the way WinRAR processes the ZIP file format, has been under active exploit since April in securities trading forums, researchers from security firm Group IB reported Wednesday. The attackers have been using the vulnerability to remotely execute code that installs malware from families, including DarkMe, GuLoader, and Remcos RAT.

From there, the “criminals” withdraw money from broker accounts. The total amount of financial losses and total number of victims infected is unknown, although Group-IB said it has tracked at least 130 individuals known to have been compromised. WinRAR developers fixed the vulnerability, tracked as CVE-2023-38831, earlier this month.“

https://arstechnica.com/security/2023/08/winrar-0-day-that-uses-poisoned-jpg-and-txt-files-under-exploit-since-april/

#PunchUp #Yuppies #0Day #Hackers #WinRar

Report from Ottawa's Punch Up Collective about the kid-centred May Day picnic and march they organized this year:

https://north-shore.info/2023/07/31/punch-up-may-day-as-though-kids-matter/

#PunchUp #Ottawa #MayDay

Just finished reading #PunchUp #BL #boyslove #manga book 5 by #KanoShiuko <3 I've been reading her books for 23 years and will continue for another 23~! :sendinglove:​

How to avoid being a sadist lawyer?
Always 'choose' to #PunchUp
#LawMastodon
https://doctorow.medium.com/how-lawyers-became-sadists-3e58410fea5

@Captain
#PunchUp