c/security · by Zerush@lemmy.ml · 161dGitHub - Bombadil-Systems/zombie-zip: Malformed ZIP archive that evades antivirus detection by declaring Method=0 (stored) while containing DEFLATE-compressed payload. https://github.com/bombadil-systems/zombie-zipNot solved problem since 20 years See also https://kb.cert.org/vuls/id/976247 6 points · 2 comments · view on lemmy.world
2 Comments
rijom@lemmy.ml · 1 pts · 161d
How is this different from just any simple encryption of a valid zip?
Zerush@lemmy.ml · 1 pts · 161d
It isn't, that is the problem for AVs to detect it