Fake Snow White Movie Torrent Infects Devices with Malware
ID: af3a6ba1-698c-5591-a2b7-88f6c5b1af56
STIX ID: report--af3a6ba1-698c-5591-a2b7-88f6c5b1af56
Feed Name: HackRead
Threat Score
Researchers at Veriti and reporting by HackRead detail a malicious torrent campaign impersonating the 2025 Snow White movie: a compromised TeamEsteem blog offered a magnet link that delivered a bundle containing a fake codec ('xmph_codec.exe') which disables Windows Defender, drops further malware, installs the Tor browser, and connects to a darknet .onion C2; the site compromise is attributed to either CVE-2023-40680 in Yoast SEO or stolen admin credentials.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
