The rigged copy of 'Thank U, Next' was designed to exploit a newly discovered flaw in WinRAR, a popular file compression tool. Unpacking the album with vulnerable versions of WinRAR can secretly deliver malware to your PC's Startup Folder.
Source Link

