The use of .7z archives for malware has surged recently due to specific vulnerabilities in the 7-Zip software itself:
Once the user extracts the .7z archive and runs the contained files, the malware establishes persistence on the host machine and begins communicating with a Command and Control (C2) server to upload stolen data. Recent Security Context for 7-Zip Files Kiwi holiday.7z
If you have encountered this file or recently downloaded 7-Zip from an unofficial source, take these steps: The use of
Security researchers have linked "Kiwi holiday.7z" to the (also known as Thallium or Black Banshee) threat group. This group frequently uses lures related to South Korean or regional interests to distribute malware. Ensure you are using version 24
Ensure you are using version 24.09 or later to patch known vulnerabilities. You must download this manually from the official 7-Zip website as the software does not auto-update.