7-Zip Leaves Extracted Malware Without Mark-of-the-Web, Bypassing Windows SmartScreen

A 7-Zip flaw can allow malware extracted from a specially crafted archive to lose Windows’ Mark-of-the-Web (MotW) label. Without that label, Windows SmartScreen may not display its usual reputation warning when a victim runs the extracted file. Tracked as CVE-2025-0411, the issue affects 7-Zip versions before 24.09 and was added to CISA’s Known Exploited Vulnerabilities catalog in February 2025. The flaw requires user interaction, such as opening or extracting a malicious…