Most antivirus software struggles to scan the contents of a compressed folder in real-time until it is extracted.
Zip files are the preferred delivery method for cybercriminals for two reasons:
Every keystroke you type (including bank passwords) is recorded and sent to the attacker.