September 18, 2026
- MovieReaper spreads through compromised torrents, uses "The Odyssey" rootkit and Solana blockchain records for C2 resolution, and masquerades as legitimate system files; Kaspersky assesses that taking down its initial C2 domain would meaningfully disrupt the campaign (Securelist). · Threat Activity
in Plugin4Shell Turns Pinned Agent Plugins Into Zero-Click RCE