MovieReaper Torrent-Masqueraded Executable Spawned by Torrent Client

Ibrahim Saud@tektrix

•updated 22 days ago•0•0•1

Detects the execution of suspicious binaries that are spawned by known torrent clients or appear to masquerade as media files (e.g., using movie quality naming conventions like 1080p, Bluray). This rule identifies potential delivery of malicious payloads via P2P file sharing environments by looking for specific process patterns and filename indicators associated with file masquerading.