#malformed-zip

[ follow ]
Information security
fromThe Hacker News
5 hours ago

GootLoader Malware Uses 500-1,000 Concatenated ZIP Archives to Evade Detection

GootLoader uses malformed ZIPs concatenating 500–1,000 archives and a truncated EOCD to evade many tools while relying on Windows unarchiver to extract and run its JavaScript payloads.
[ Load more ]