The Odyssey and trojans again: MovieReaper attacks users in multiple countries via compromised torrents

This report describes MovieReaper, a modular multi-stage malware campaign that distributed trojanized torrent files via a compromised public torrent repository (itorrents.org), used a loader with heavy sandbox-evasion to fetch shellcode from a first-stage C2 (deadhub.org / 193.23.118.155), leveraged the Solana blockchain to retrieve second-stage C2 addresses, performed UAC bypass and persistence by masquerading as a Telemetry msedge.exe, and finally provided operators a 21-command file-manager module for remote filesystem access and exfiltration; the report includes technical analysis and IoCs across multiple affected countries and hosting providers.