WinRAR zero-day exploited since April to hack trading accounts
www.bleepingcomputer.com
A WinRar zero-day vulnerability tracked as CVE-2023-38831 was actively exploited to install malware when clicking on harmless files in an archive, allowing the hackers to breach online cryptocurrency trading accounts.