[midichlorianchip]

I've seen in APT campaigns that they use ISO and Zip files a lot during the execution phase. When I test that on Chrome, Chrome destroys all forms of Zip files and occasionally let ISO through.I'm also seeing vendors selling FUD ISO. What are the APTs encrypting? The ISO/Zip or the files within? How do you make ISO and Zip files pass Chrome's Safe Browsing and other security checks?

[Retaka]

Dont use zip, use iso only

[midichlorianchip]

Dont use zip, use iso only

The zip will be password protected. In this use case I'm testing users against social engineering. So They will be expecting a password-protected zip if necessary. Why no zip though? Thanks.