Comment by sysadm1n
4 years ago
> other unusual characters in file names
Saw a few hacks where malware authors used the RTL feature (which is baked into Windows) to obfuscate file extensions. It looked like .exe.innocuous-document.docx, but was actually .docx.innocuous-document.exe
This exact vulnerability in most modern code editors just made the rounds, allowing smuggling malicious code right through review.