ZeroDay Findings
Sign inSign up

Every 24 hours

Tech News

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

  1. Sep 17, 2026

    New MovieReaper Campaign Targets Torrent Users with Multi-Stage Trojan

    A newly uncovered campaign known as MovieReaper is targeting users across various countries by exploiting compromised movie torrents. Security experts from Kaspersky have identified that this campaign primarily spreads through torrents of popular films, including titles like The Odyssey. The malicious software involved is a multi-stage Trojan that not only infiltrates systems but also employs sophisticated techniques to obfuscate its command and control (C2) infrastructure by utilizing the Solana blockchain.

    What changed

    The implications of this campaign are significant, as it highlights the ongoing risks associated with downloading content from unverified sources. Users seeking to access movies through torrents may unknowingly expose themselves to this malware, which can lead to severe privacy breaches and data theft. The use of blockchain technology for C2 communication adds a layer of complexity, making detection and mitigation efforts more challenging for cybersecurity professionals.

    Who is affected

    As MovieReaper continues to evolve, it raises alarms about the safety of torrenting and the potential vulnerabilities that individuals face when engaging in such activities. The campaign underscores the importance of exercising caution and ensuring that digital safety measures are in place, particularly for users who frequently download content from the internet.

    What it means

    This incident serves as a reminder to the wider community about the need for heightened awareness regarding online threats and the importance of using legitimate sources for media consumption. As the threat landscape continues to grow, users must remain vigilant and proactive in protecting their devices and personal information from malicious attacks.

  2. Aug 24, 2026

    SEO Poisoning Campaign Uncovered: The BengalSEO Operation

    In March 2026, cybersecurity experts uncovered a significant SEO poisoning campaign known as BengalSEO, which has been linked to the deployment of malware across various platforms. This operation exploited search engine optimization techniques to manipulate search results and drive traffic to malicious sites, ultimately leading to the distribution of harmful software. The campaign not only highlights the evolving tactics employed by cybercriminals but also underscores the vulnerabilities present in digital marketing strategies that businesses rely on for visibility and engagement.

    What changed

    The affected parties include a wide range of organizations that utilize search engine optimization to enhance their online presence. As the campaign gained traction, unsuspecting users were drawn to these poisoned search results, which could lead to malware infections on their devices. This situation raises concerns about the security measures in place for businesses that depend on SEO to attract customers, as well as the potential risks users face when interacting with compromised links.

    Who is affected

    The consequences of this operation are far-reaching. Organizations may experience data breaches, loss of customer trust, and significant financial repercussions due to the fallout from malware infections. Moreover, the incident serves as a stark reminder of the importance of robust cybersecurity practices and the need for ongoing vigilance in the face of evolving digital threats. As businesses continue to navigate the complexities of online marketing, they must prioritize security to safeguard their operations and their customers.

    What it means

    In response to the BengalSEO campaign, incident response teams are urged to enhance their monitoring and detection capabilities to identify potential SEO poisoning attempts promptly. Organizations should also invest in educating their employees and customers about the risks associated with clicking on unverified links and the importance of maintaining updated security software. The BengalSEO operation illustrates the necessity for a comprehensive approach to digital security that encompasses both technical defenses and user awareness.