Fake Update Campaign on Pirated Streaming Sites Delivers Silent CryptoMiner and RAT

Hackers are running a stealthy malware campaign targeting users visiting
pirated movie and TV show streaming sites. Visitors will be prompted to
update their video player plugin to download an archive consisting of an
executable file and a DLL file.

Pulse ID: 6a1f0902c202168f0b38b99d
Pulse Link: https://otx.alienvault.com/pulse/6a1f0902c202168f0b38b99d
Pulse Author: cryptocti
Created: 2026-06-02 16:46:58

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CryptoMiner #CyberSecurity #InfoSec #Malware #OTX #OpenThreatExchange #RAT #bot #cryptocti