Attackers can remotely execute code on targeted systems via specially crafted subtitle files for videos.
Source: Malware Subtitle Hack Leaves 200 Million Vulnerable to Remote Code Execution

Password Breaches Fueling Booming Credential Stuffing Business