Fake The Odyssey Downloads Are Hiding Password-Stealing Malware

A new cyber threat has emerged, exploiting the popularity of the film "The Odyssey" to distribute malware designed to steal sensitive information. Bitdefender researchers have discovered that fake downloads of the movie are actually hiding the Lumma Stealer malware, which can capture passwords, cookies, payment data, and cryptocurrency details stored on an infected device.

The malware, believed to be developed by a Russian hacking group, is sold as a service, allowing other cybercriminals to use it without creating their own tools. The campaign takes advantage of the widespread interest in pirated copies of the film, tricking users into downloading an executable file disguised as the movie. This file often uses icons from legitimate media players and may hide its .exe extension, making it appear as a harmless download.

Once executed, the malware can access a range of personal and financial data, including browser passwords, authentication cookies, and cryptocurrency wallet information. Researchers urge users to exercise caution when downloading files, especially those disguised as media, and to use security software to detect and prevent such attacks.