Kaspersky uncovers malware campaign spread via movie torrents

Kaspersky GReAT has uncovered a multi-stage campaign in which a previously unknown malware strain is distributed through torrent trackers disguised as popular films, including The Odyssey. Several hundred victims have been identified across Russia, Türkiye, Japan, Kenya, Uganda, Colombia and several European countries, including organisations in enterprise, government, IT and retail.

• Malware is disguised as torrents for films including The Odyssey
• Loader detects antivirus sandboxes to evade analysis
• Modules bypass UAC, establish persistence and grant remote access
• Command-and-control address is retrieved via the Solana blockchain