11
Fake ‘One Battle After Another’ torrent hides malware in subtitles (www.bleepingcomputer.com)
submitted 11 months ago by to c/cybersecurity@sh.itjust.works
5 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 11 months ago (3 children)

Technically speaking it is hidden in a SRT subtitle file, but it's not the like you can execute the SRT file, since it's just text.

If you are downloading pirates movies, it makes sense to not click on on random stuff in the torrent/download that's clearly not a media file.

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [–] 3 points 11 months ago (2 children)

    The whole exploit is based on the user clicking on a .lnk shortcut, which then executes commands found in the subtitle text file.

    Which seems strangely over complicated. How does it really help to involve the subtitles file at all?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •