zombie-zip

Zombie ZIP ZIP形式の混乱を利用し、アンチウイルスエンジンの98%を回避する技術。 CVE-2026-0866 | VU976247 | 2026年3月10日公開 技術 次のようなZIPファイルを作成します： Compression Method = 0 STORED Actual data = DEFLATE compressed CRC-32 = Checksum of uncompressed payload AV Engine: Reads Method 0 → Scans compressed noise → No detection Attacker: Ignor...

CVE-2026-0866

After the publication of the PoC by the researcher and further analysis, we have determined that this issue does not constitute a valid vulnerability. The technique described is an obfuscation method and does not bypass or impact any implicit or explicit security controls...

CVE-2026-0866

creationtimestamp| type| source ---|---|--- 2026-03-11 09:36:01+00:00| seen| https://infosec.exchange/users/decio/statuses/116209861321874609 2026-03-11 10:09:25+00:00| seen| https://t.me/ctinow/246968 2026-03-11 19:22:12+00:00| seen|...

CVE-2026-0866

CVE-2026-0866 corresponds to the Zombie ZIP technique. Attackers manipulate ZIP headers (e.g., compressiontype=0, stored) so tools scan the archive as uncompressed data while the payload is actually DEFLATE compressed. A custom loader decompresses the payload, enabling bypass of many antivirus/ED...