logo

Fake Snow White Movie Torrent Infects Devices with Malware

ID: af3a6ba1-698c-5591-a2b7-88f6c5b1af56

STIX ID: report--af3a6ba1-698c-5591-a2b7-88f6c5b1af56

Feed Name: HackRead

Threat Score
70/100

Date Published: 2025-03-27

Date Updated: 2026-04-22

Author: Waqas

...
...

Researchers at Veriti and reporting by HackRead detail a malicious torrent campaign impersonating the 2025 Snow White movie: a compromised TeamEsteem blog offered a magnet link that delivered a bundle containing a fake codec ('xmph_codec.exe') which disables Windows Defender, drops further malware, installs the Tor browser, and connects to a darknet .onion C2; the site compromise is attributed to either CVE-2023-40680 in Yoast SEO or stolen admin credentials.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.