System possibly hijacked by malware (downloadable .rar file)

[ilikelinux]

@litemotiv

It seems highly unlikely to me that a prank script like that would be injected through a password protected RAR file on Aliexpress

@johnandmegh

I’d guess that early on, you’d want to figure out if “what appeared to be a file hosting service” could have been a malicious site itself, serving some sort of drive-by browser exploit,

Most likely already there while downloading. Making a fake download button:
Run a shell script with an html button - Stack Overflow