The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through compromised torrents
Kaspersky documents MovieReaper, a multi-stage trojan spread via popular movie torrents that hides its C2 infrastructure on the Solana blockchain—an evasion technique that defeats traditional domain-based takedowns.
Summary written by editorial AI · Source link below
Kaspersky experts have discovered a new MovieReaper campaign. The multi-stage Trojan spreads through movie torrents, such as The Odyssey, and uses the Solana blockchain to hide its C2 infrastructure.
Editorial Analysis
Blockchain-based C2 infrastructure is increasingly attractive to threat actors because it resists takedown and domain blocking, forcing defenders to develop new detection paradigms.
Update threat hunting playbooks to include blockchain API call monitoring and ingest MovieReaper IOCs from Kaspersky's report.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at Securelist (Kaspersky) in a new tab.
More from the Threat Intel Desk
- PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking1d
- BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot2d
- Trust Is Not What It Seems — And Fraudsters Are Counting on It3d
- AI Tools Are Generating Massive Attacks for Little Cost3d
- The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)3d