Kaspersky experts have discovered a new MovieReaper campaign. The multi-stage Trojan spreads through movie torrents, such as "The Odyssey," and uses the Solana blockchain to hide its C2 infrastructure.
The most popular initial executable was distributed through torrent trackers under many different names (for example, the odyssey (2026) [1080p][webrip][5.1].exe),
A big part of why this works, I think, is because windows hides extensions by default.
Old tricks still work
Edit - Oh shit that’s exactly what they did.
A big part of why this works, I think, is because windows hides extensions by default.