Homelab

Someone on Torrent Sites Kept Fucking With My SonarrPLEASE stop putting skid malware on torrent sites as South Park episodes

A homelab owner traces a South Park episode stuck in Sonarr's queue to a .exe on public trackers with thousands of seeders, then reverse-engineers it: a 118 KB stealer padded with 886 MB of junk to dodge scanners, using encrypted strings and ChaCha20 config to grab browser passwords, crypto wallets, password managers, dev credentials and more, plus practical qBittorrent, Sonarr and Prowlarr defenses.

Blog post · Security · Malware · Reverse Engineering · Homelab