WinRAR 6.23 Download: New Version Fixes Critical Vulnerability Exploited Since April

In a recent development, the security firm Group-IB has revealed that a critical vulnerability in WinRAR 6.22 and earlier versions has been exploited since April 2023 to install malware on victims' devices. The vulnerability, tracked as CVE-2023-38831, allows threat actors to craft ZIP archives that serve as carriers for various malware families. Once extracted and executed, the malware enables attackers to withdraw money from broker accounts.

According to Andrey Polovinkin, a Malware Analyst at Group-IB, the weaponized ZIP archives were distributed on trading forums, allowing attackers to exploit the vulnerability within the WinRAR program. By doing so, they could remotely execute code that installs malware from families such as DarkMe, GuLoader, and Remcos RAT. From there, the criminals would withdraw money from broker accounts.

The good news is that WinRAR developers have since fixed the vulnerability in the latest version, 6.23. However, it's unclear what financial losses or total number of victims have been affected by this exploit. Group-IB has tracked at least 130 individuals who have been compromised, but the actual numbers may be much higher.

The vulnerability resides in the way WinRAR processes the ZIP file format and has been under active exploitation since April on securities trading forums. This highlights the importance of keeping software up-to-date and being cautious when opening files from unknown sources.

To stay safe, it's essential to download and install the latest version of WinRAR 6.23, which includes the fix for this critical vulnerability. Additionally, users should be careful when opening ZIP archives or other file formats, especially if they were received from unknown sources.

In conclusion, the recent revelation emphasizes the importance of software updates and cybersecurity awareness. It's crucial to stay informed about the latest vulnerabilities and take necessary precautions to protect against malware attacks.

WinRAR 6.23 download the new version