Key facts
- Pirated copies of 'The Odyssey' are being distributed as fake HD movie rips.
- These files are Windows executables that install Lumma Stealer malware.
- The malware targets cryptocurrency wallets, browser passwords, and authentication cookies.
- Attackers use deceptive icons and hide file extensions to trick users.
- This tactic is part of a broader trend of distributing malware within desirable content.
Cybercriminals are exploiting the release of the film 'The Odyssey' by distributing pirated copies that contain malicious software. Security firm Bitdefender discovered that these fake downloads, presented as high-definition movie rips, are in fact Windows executables designed to install Lumma Stealer malware. This type of malware is known for its ability to steal cryptocurrency wallets, browser passwords, saved payment details, and authentication cookies, potentially compromising accounts even if multi-factor authentication is enabled.
Attackers employ tactics such as using icons that mimic legitimate media players like VLC and exploiting Windows' default setting of hiding file extensions to disguise the executable files. This makes it difficult for users to distinguish between a video file and a malicious program. Bitdefender has reported blocking these malicious downloads and identifying the associated command-and-control servers. The firm noted that this campaign is similar to a previous one in 2025 that used fake 'Mission: Impossible – The Final Reckoning' files to spread the same malware.