"Explain these pictures" on Steam profile (phish/hack I don't know which)

I know, changeable by my "comment permissions" to friends only or just me.

The part when I said that the person wasn't on my friends list was me wondering why someone I didn't know was asking me to explain some pictures and why I'd need to explain myself to a complete stranger. The suggestion was that it was pictures of me or relating to me, being caught out doing something I shouldn't have been doing.

Presumably the rar just has a trojan in it that gets set loose when you unrar whatever is in there.

I presume the files are named .jpg.exe and have the default image icon so many people will see it as .jpg 'cause they have the 'hide extension for known types' option enabled. And because of that, they are tricked into opening an executable trojan/virus. Seen a ton of these files on the internets so people must be falling for them... don't fall for cheap tricks people, please.

Yes it a trojan ( not phishing and hack only in its purest original sennse ), its possible to make a .exe inside a rar autoexec at unrar with some software but if one is using winrar it won't autoexec by default unless the winrar config is changed to do so. Any antivirus should auto check the file the moment it is extracted.

Another historical possibility would be a 42.zip bomb variant, a 42k that was in fact a 42T sized file.