Lumma Stealer Returns: Pirated Movies Used to Spread Malware

Bitdefender researchers have discovered that pirated copies of The Odyssey movie are being used to distribute Lumma Stealer, a particularly nasty strain of information-stealing malware. The malicious files are disguised as high-resolution video downloads with filenames designed to look legitimate.

Lumma Stealer targets Windows systems and silently harvests sensitive data from the infected machine, including browser passwords, autofill data, payment card numbers stored in Chrome or Edge, and cryptocurrency wallet credentials.

The malware's ability to steal session cookies makes it particularly dangerous for crypto holders, as an attacker can bypass two-factor authentication entirely by replaying the active browser session on an exchange or wallet interface.