Most antivirus software struggles to scan the contents of a compressed folder in real-time until it is extracted.

Zip files are the preferred delivery method for cybercriminals for two reasons:

Every keystroke you type (including bank passwords) is recorded and sent to the attacker.