Government-backed actors exploiting WinRAR vulnerability
When writing contents of the files, WinRAR performs path normalization that removes appended spaces, because Windows doesn’t allow files with trailing spaces. Finally, WinRAR calls ShellExecuteExW, passing the non-normalized path…