WinRAR has historically been a target for threat actors due to its massive user base of over 500 million people. :
By WinRAR 6.11, the situation had changed entirely: winrar regkey patched
For users who want the same visual interface and workflow, Bandizip is the closest match. For users who prioritize security and openness, 7-Zip remains the industry standard. WinRAR has historically been a target for threat