Reported by 2 outlets

Timeline

1. original reporting

   MovieReaper Malware Spreads Through Pirated Movie Torrents and Uses Solana for C2

   gbhackers.com · 26d ago · September 18th, 2026

   A newly identified Windows malware framework dubbed MovieReaper is being distributed through pirated movie torrents after threat actors compromised a public torrent-file repository used by multiple tracker sites. The campaign combines a multi-stage infection chain, anti-analysis techniques, UAC bypass, file-management capabilities, and Solana blockchain-based command-and-control (C2) discovery to make disruption more difficult. Kaspersky researchers identified […] The post MovieReaper Malware Spreads Through Pirated Movie Torrents and Uses Solana for C2 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

2. update from cyberpress.org

   MovieReaper Gives Hackers 21 Commands to Steal and Manipulate Files on Windows PCs

   cyberpress.org · 25d ago · September 18th, 2026

   A newly identified malware framework named MovieReaper is spreading through malicious torrent downloads disguised as popular movies. The modular Windows threat gives attackers 21 remote file-management commands, enabling them to steal, inspect, alter, and delete data from infected systems. Researchers identified the campaign in mid-August 2026 after finding victims in multiple countries, including Russia, Türkiye, Japan, Kenya, Uganda, Colombia, Spain, the Netherlands, Belgium, and Germany. The operation has affected individual users as well as organizations in government, IT, consulting, retail, transportation, agriculture, and enterprise sectors . The threat is detected by Kaspersky products as HEUR:Trojan.Win64.Agent.gen . MovieReaper Grants File Control MovieReaper operators did not need to compromise torrent-tracker websites directly. Instead, they reportedly compromised itorrents[.]org , a public torrent-file repository used by several trackers. When users select a magnet link, the affected archive may return a malicious torrent file instead of the expected movie or software download. The torrent then downloads a loader disguised as a media release, such as the odyssey (2026) [1080p] [webrip] [5.1].exe . The initial file uses long names and familiar application icons to make the .exe extension less noticeable. MovieReaper Grants File Control (Source: securelist) This tactic is especially dangerous for users downloading pirated content, as installation instructions often