Online Threat Alerts (OTA)
An anti-cybercrime community alerting the public.

.RAR Malicious Email Attachments

Online users who have received unexpected email messages with attached files with names ending with ".rar" are asked not to open them. This is because the attachments are compressed files that may contain malware, malicious programs, or viruses. And, any attempt to open the malicious attachments will result in the recipients getting their computers infected with a virus, Trojan horse, spyware, ransomware or other malware.

Advertisements

A Malicious ".RAR" Email

Subject: wrong IBAN/Account number
Attachment: swift.rar (158 KB)

Good Day,

Payment from our client to your company was declined due to wrong IBAN/Account number

Kindly find attached bank details and confirm that information is correct so we can proceed with transfer again.

Thanks

Faizal.

The .RAR compression is similar to ZIP which is the most popular file compression or archive formats.

Cyber criminals usually store their malware in compressed files to help prevent antivirus software from detecting them. In other words, they do it because the compressed malicious email attachments may bypass the recipients' antivirus software.

What is a .RAR file?

RAR is the native format of WinRAR archiver. Like other archives, RAR files are data containers, they store one or several files in the compressed form. After you have downloaded RAR file from the Internet, you need to unpack its contents in order to use it.

Check the comment section for additional information, or share what you know or ask a question about this article, by clicking the 'View or Write Comment' button below.

Note: Some of the information in samples on this website may have been impersonated or spoofed.

Share this article with others.
Advertisements
Write / View Comments (0)
View on Online Threat Alerts (OTA)
Help Maintain Online Threat Alerts (OTA)