"Odyssey" Pirated Files Hide Lumma Stealer, Can Bypass Two-Factor Authentication to Steal Crypto Wallets
According to Decrypt, cybersecurity company Bitdefender has issued a warning that malware disguised as HD pirated copies of the movie "Odyssey" has spread rapidly within days of the film's release. These files are disguised as normal torrent files with naming conventions such as WEBRip and Blu-ray, but are actually Windows executable programs that automatically install the Lumma Stealer information-stealing trojan upon execution. Lumma Stealer can steal browser passwords, payment information, autofill data, remote desktop credentials, and cryptocurrency wallets, and can also steal authentication cookies; even if the target account has two-factor authentication (MFA) enabled, it is not spared. Attackers also deliberately disguised the malicious file icons to resemble the VLC player, exploiting Windows' default feature of hiding extensions to deceive users.