Infinite.zip
The ZIP algorithm can compress repetitive data (like a file filled entirely with zeros) extremely efficiently. A 10 GB file of zeros can be compressed into a few megabytes.
It is used to overwhelm security software that attempts to scan within archives, preventing it from detecting other, actual malicious files. 4. Mitigation and Defense Infinite.zip
Here is a deep report on its mechanics, purpose, and mitigation: 1. What is it? The ZIP algorithm can compress repetitive data (like
"Infinite.zip"—often referred to in technical circles as a type of or decompression bomb (such as the famous 42.zip )—is a maliciously crafted archive file designed to crash, freeze, or overwhelm the storage capacity of any system that attempts to unpack it. "Infinite
The most infamous example, 42.zip , is a 42-kilobyte file that, when fully extracted, expands to 4.5 petabytes (
Do not extract unknown or unexpectedly small zip files from untrusted sources. zip and recursive zip bombs ? 42.zip (2004) - Hacker News
Its primary purpose is to exhaust disk space (filling up the server's hard drive) or cause high CPU utilization, resulting in system failure.
