The ZIP algorithm can compress repetitive data (like a file filled entirely with zeros) extremely efficiently. A 10 GB file of zeros can be compressed into a few megabytes.
The file is built by compressing a set of files that are themselves compressed, repeating this process -levels deep.
Here is a deep report on its mechanics, purpose, and mitigation: 1. What is it?
When an antivirus scanner or user unzips the file, the decompression engine attempts to expand every layer, leading to an exponential increase in disk space usage. 3. Purpose and Impact
It is used to overwhelm security software that attempts to scan within archives, preventing it from detecting other, actual malicious files. 4. Mitigation and Defense
It relies on recursive compression —layers upon layers of nested ZIP files. A single file might contain 100 zip files, each containing 100 more, and so on. 2. How it Works (The Mechanics)
A tiny compressed file (often only a few kilobytes or megabytes in size) that expands into a gargantuan amount of data (petabytes, exabytes, or "infinite" space) upon extraction.
Modern antivirus software and archiving tools (like 7-Zip) often limit the number of nested levels they will scan or extract to avoid this type of attack.
Каждую неделю мы отправляем нашим подписчикам подборку интересных событий ближайших дней.
Подпишитесь, чтобы не пропустить самое интересное в городе!