Developers of the file compression software WinRAR have fixed a zero-day vulnerability that was being exploited by hackers to install malware on unsuspecting victims' computers. The vulnerability allowed hackers to breach online crypto and stock trading accounts. The exploit was used for approximately four months, during which time malicious RAR and ZIP archives were distributed on trading forums, infecting at least 130 devices.

The malware allowed threat actors to withdraw money from broker accounts and was patched in WinRAR version 6.23, released on Aug. 2, after being reported by Singapore-based cybersecurity firm Group-IB.