Exploits allow for persistent backdooring when targets open booby-trapped archive.

https://arstechnica.com/security/2025/08/high-severity-winrar-0-day-exploited-for-weeks-by-2-groups/