Fake The Odyssey Downloads Are Hiding Password-Stealing Malware

Bitdefender researchers found an active campaign delivering Lumma Stealer by luring victims with fake pirated copies of Christopher Nolan’s film The Odyssey; the malicious executables (often disguised with media-player icons and hidden .exe extensions) harvest browser passwords, cookies, payment and cryptocurrency data, autofill and remote desktop credentials, and contact identified C2 domains (auditva.cyou, myroayy.cyou, logmabx.click). The report highlights MaaS distribution of Lumma, observed bait filenames, recommended mitigations (show file extensions, avoid untrusted downloads, use security software), and warns the campaign may be wider than the observed samples.