Malwarecritical

Week in review: Exploited 7-Zip 0-day flaw, crypto-stealing malware found on App Store, Google Play

Help Net Securityby @helpnetsecurityFeb 9, 2025 · 00:00 UTC (Feb 9, 2025)4 min read1 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-0411 CVE-2025-25181 CVE-2024-57968 CVE-2024-40891

Tags: cve-2025-0411 cve-2025-25181 cve-2024-57968 cve-2024-40891 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-40891	Post-Authentication OS Command Injection in Zyxel DSL CPE Devices	8.8	23%	KEV	Feb 4, 2025 KEV Feb 11, 2025
CVE-2024-57968 +1 related CVE CVE-2025-25181	Unrestricted File Upload in Advantive VeraCore upload.aspx	8.8 group max	32%	KEVPoC ×2	Feb 3, 2025 KEV Mar 10, 2025
CVE-2025-0411	Mark-of-the-Web Bypass in 7-Zip Enables Code Execution via Crafted Archives	7.0	67%	KEV	Jan 25, 2025 KEV Feb 6, 2025

From the original article

4 min read at helpnetsecurity.com

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Russian cybercrooks exploiting 7-Zip zero-day vulnerability (CVE-2025-0411) CVE-2025-0411, a Mark-of-the-Web bypass vulnerability in the open-source archiver tool 7-Zip that was fixed in November 2024, has been exploited in zero-day attacks to deliver malware to Ukrainian entities, Trend Micro researchers have revealed.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.