WinRAR vulnerability exploited by two different groups - Malwarebytes

: Installing programs in startup folders to run every time the computer boots.

: Hiding original files and replacing them with encrypted ransom notes. Recommended Actions

: If extracted or executed, such files can result in:

If you have downloaded or interacted with this file, take the following steps immediately: