Security researchers identify malware in fake movie downloads stealing cryptocurrency wallets and authentication cookies from users.
Cybersecurity firm Bitdefender discovered malicious Windows executables masquerading as pirated copies of the film *The Odyssey*, released August 12, 2026. The files, labeled as high-definition rips, install Lumma Stealer malware, which extracts cryptocurrency wallets, passwords, and browser cookies.
The malware surfaced within days of the film’s release, exploiting demand for illicit downloads. Attackers used VLC-style icons and hidden file extensions to deceive users, a tactic that has become common in recent years for distributing wallet-draining malware.
Lumma Stealer can bypass multi-factor authentication by hijacking session cookies, posing a significant risk to crypto holders. The incident highlights ongoing threats to digital assets from seemingly legitimate content.