Back to Feed
MalwareSep 22, 2026

MovieReaper Malware Uses The Odyssey Torrents to Infect Users Worldwide

MovieReaper malware spreads via compromised torrents, using Solana for C2 infrastructure.

A new malware strain, dubbed MovieReaper, is actively infecting users worldwide by distributing itself through compromised torrent files on the Odyssey platform. The malware leverages the Solana blockchain to obscure and locate its command-and-control (C2) infrastructure, making it harder for security researchers to track and disrupt. Hundreds of victims have already been identified.

AI summary of the linked source. Not reviewed by an editor. How this works

Vendor Watch

Run Solana?

Get an email when a new story names Solana, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

The lesson from this incident

Full lesson

MovieReaper highlights how threat actors exploit trusted-seeming distribution platforms — in this case, torrent sites — to deliver malware to unsuspecting users seeking pirated content. By leveraging the Solana blockchain as a decentralized command-and-control mechanism, the attackers make traditional domain takedown and IP blocking ineffective, significantly extending the malware's operational lifespan. This supply chain-style compromise of a content distribution platform means victims believe they are downloading legitimate files while inadvertently executing malicious payloads. The case underscores that user behavior — specifically downloading pirated or unverified content — remains one of the most exploitable attack vectors available to adversaries.

What helps against this

How we list vendors

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

  • malware — MovieReaper

Entities

Torrents (technology)Blockchain (technology)Solana (product)