Skip to content
iTorrents.org Compromised to Distribute MovieReaper Malware

iTorrents.org Compromised to Distribute MovieReaper Malware

First seen 17 Sep 2026, 16:30 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster September 17, 2026 at 18:24 UTC

iTorrents.org has been compromised to spread a new Windows-based malware called MovieReaper, affecting several hundred victims across multiple countries, including Russia, Japan, and Spain. Kaspersky reported that the malware is distributed through disguised torrents of popular films, leading users to download malicious executable files instead of legitimate content. The malware communicates with the attackers via the Solana blockchain and possesses capabilities to manipulate and exfiltrate files. Victims primarily used torrent trackers that relied on iTorrents.org, which remains compromised. Kaspersky's investigation revealed that the malware loader initiates the infection chain, and the threat actors have not compromised individual torrent platforms but rather the repository itself. As of now, the malicious torrents continue to circulate, posing a significant risk to users downloading from these sources.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-15
Kaspersky flags iTorrents.org compromise
Kaspersky identifies iTorrents.org as a source of malware distribution affecting hundreds of users globally.
Uk.Pcmag
2026-09-17
Kaspersky publishes detailed report
Kaspersky releases a report detailing the infection method and capabilities of the MovieReaper malware.
securelist.com

More articles in this cluster (3)

Following this threat?

Track Mirage Kitten and MovieReaper in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed