SmokeLoader malware aimed at multiple Ukrainian industries, using bug in file archiver
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-0411 | Mark-of-the-Web Bypass in 7-Zip Enables Code Execution via Crafted Archives | 7.0 | 67% | KEV | KEV |
From the original article
2 min read at therecord.media
A Russian hacking campaign has exploited a vulnerability in a popular file archiver to infect Ukrainian government and private organizations with SmokeLoader malware, researchers have found. The bug, tracked as CVE-2025-0411 , was discovered in 7-Zip, a free and open-source file archiver developed by Russian programmer Igor Pavlov.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.