

Yes, to be perfectly clear we are indeed talking about stuffing exabytes of data into kilobytes.

A typical zip bomb file can easily unpack into hundreds of gigabytes of garbage data and more advanced ones can go up to petabytes (millions of gigabytes) or even exabytes (billions of gigabytes). However, when this file is unzipped it’s contents are more than what the system can handle. The classic zip bomb is a tiny zip archive file, most are measured in kilobytes. Rather than hijacking the normal operation of the program, a zip bomb allows the program to work as intended, but the archive is carefully crafted so that unpacking it (for example, by an anti-virus in order to scan for viruses) requires inordinate amounts of time, disk space or memory (or all of these). It could also be employed to disable anti-virus software in order to create an opening for other typical viruses. A zip bomb, also known as a decompression bomb (or the ‘Zip of Death’ for the overly dramatic ones), is a malicious archive file designed to crash or render useless the program trying to access it.
