Do not extract unknown or unexpectedly small zip files from untrusted sources. zip and recursive zip bombs ? 42.zip (2004) - Hacker News
A tiny compressed file (often only a few kilobytes or megabytes in size) that expands into a gargantuan amount of data (petabytes, exabytes, or "infinite" space) upon extraction. Infinite.zip
The file is built by compressing a set of files that are themselves compressed, repeating this process -levels deep. Do not extract unknown or unexpectedly small zip
Modern antivirus software and archiving tools (like 7-Zip) often limit the number of nested levels they will scan or extract to avoid this type of attack. The file is built by compressing a set
Systems should be configured to reject archives where the ratio of compressed-to-uncompressed size is suspiciously high.
Here is a deep report on its mechanics, purpose, and mitigation: 1. What is it?