The pirated resources of the movie "Odyssey" hide a Trojan that can steal encrypted wallet and account information

According to Decrypt, security company Bitdefender has warned that the newly released Hollywood blockbuster "The Odyssey" has been embedded with Lumma Stealer information-stealing malware by attackers, who are attempting to steal users' cryptocurrency wallets, passwords, and browser data through fake movie files.

Bitdefender revealed that the malicious files began spreading within days of the film's release, with attackers disguising them as high-definition WEBRip or Blu-ray version resources and using names similar to legitimate torrent files to entice users to download. In reality, these files are not videos but Windows executable programs that, when run, will infect the device. Attackers often replace the file icons to make them look like VLC player or video files, while also taking advantage of Windows' default setting to hide file extensions, reducing users' ability to recognize the risk.

Once executed, Lumma Stealer will collect saved passwords, payment information, autofill data, remote desktop credentials, and sensitive information including cryptocurrency wallets. Additionally, the malware will steal authentication cookies, allowing attackers to potentially bypass some account protections even if the user has enabled multi-factor authentication (MFA).