MovieReaper Malware Uses The Odyssey Torrents to Infect Users Worldwide
MovieReaper malware spreads via compromised torrents, using Solana for C2 infrastructure.
A new malware strain, dubbed MovieReaper, is actively infecting users worldwide by distributing itself through compromised torrent files on the Odyssey platform. The malware leverages the Solana blockchain to obscure and locate its command-and-control (C2) infrastructure, making it harder for security researchers to track and disrupt. Hundreds of victims have already been identified.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Solana?
Get an email when a new story names Solana, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonMovieReaper highlights how threat actors exploit trusted-seeming distribution platforms — in this case, torrent sites — to deliver malware to unsuspecting users seeking pirated content. By leveraging the Solana blockchain as a decentralized command-and-control mechanism, the attackers make traditional domain takedown and IP blocking ineffective, significantly extending the malware's operational lifespan. This supply chain-style compromise of a content distribution platform means victims believe they are downloading legitimate files while inadvertently executing malicious payloads. The case underscores that user behavior — specifically downloading pirated or unverified content — remains one of the most exploitable attack vectors available to adversaries.
What helps against this
How we list vendors- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
- DNS filtering and secure web gateway
Users cannot reach known-malicious sites, and malware cannot phone home.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — MovieReaper