Snow White — Beware the Bad Apple in the Torrent
Essential information
- Published
- 27/03/2025 11:03
- Modified
- 27/03/2025 14:21
- Tags
- 2025-03-27 CVE-2023-40680 codec installer dark web iocs malware dropper movie piracy social engineering tor network torrent
- Related entities
- 8 techniques (mitre)
Description
A new malware campaign is targeting users attempting to download the Snow White movie through torrent sites. The attackers exploit a compromised blog to distribute a malicious torrent package disguised as a pirated version of the film. The package contains a fake codec installer that, when executed, deploys sophisticated malware. This malware disables security features, installs the TOR browser, and communicates with a Dark Web C2 server. The campaign revives old social engineering tactics while incorporating modern malware delivery methods and anti-detection techniques. The article provides file hashes and IoCs for detection, emphasizing the ongoing risks associated with pirated content and the importance of updated security measures.