WinRAR Flaw Exposes Users To Apanyan, AsyncRAT, Murk

**Executive summary:** This report details an active cybercrime campaign abusing WinRAR CVE-2023-38831 to execute a hidden CMD from crafted RAR archives (often distributed via adult or fake adult sites), which downloads a BAT/PowerShell chain that deploys Apanyan Stealer, Murk‑Stealer and AsyncRAT to exfiltrate credentials and provide remote access; the document includes a full technical analysis, anti‑VM checks, MITRE ATT&CK mapping, and IOCs (hashes and URLs) for detection and mitigation.