If the archive contains a fake PDF reader or a malicious macro in a Word document, it can steal saved passwords, browser cookies, SSH keys, and cloud credentials.