A recently patched vulnerability in the 7Zip archiver was exploited to deliver the SmokeLoader Malware.
The vulnerability, CVE-2025-0411, (CVSS score: 7.), allows remote attackers circumvent mark-of the-web (MotW), and execute arbitrary codes in the context of current user. 7-Zip addressed the issue in November 2024, with version 24.09.
“The vulnerability was