Cybercriminals are capitalizing on the widespread interest in Christopher Nolan's film "The Odyssey" by creating deceptive websites that promise free online streaming. These fake sites are designed to trick moviegoers into divulging sensitive financial information and potentially installing malware on their devices.
Security researchers have observed these scams intensifying following the film's theatrical release in July. The fraudulent websites often feature convincing video players, fake reviews, and offers for free trials. Upon attempting to access the movie, users are prompted to create an account and provide credit card details, ostensibly for trial activation. However, no movie is ever provided, and the collected information is instead used for fraudulent purposes.
The U.S. Federal Trade Commission (FTC) has previously warned that websites offering free movies and TV shows can be a vector for malware. This malicious software can be used to steal personal data, including login credentials for online accounts and bank account numbers.
Malwarebytes, a cybersecurity firm, reported that scam operations targeting "The Odyssey" emerged within hours of the movie's premiere. These included cloned piracy sites displaying fabricated browser warnings and offering movie downloads disguised as executable files. Clicking on these fake warnings can redirect users to malvertising networks, exposing them to further risks.
Scammers leverage the timing of major film releases, understanding that heightened public interest creates an opportunity. Fake reviews and professional-looking interfaces contribute to the illusion of legitimacy. Similar tactics were observed during the promotion of "Barbie," another highly anticipated film.
Experts advise caution when encountering streaming offers, particularly for newly released films still in theaters. Checking the website's domain name for subtle spelling errors or unusual endings and being wary of sites requiring credit card information for "free" content are crucial steps. Legitimate services may require payment details for free trials, but users should verify the service's trustworthiness independently.
To protect against these scams, security researchers recommend using robust antivirus software, sticking to official streaming platforms or official studio websites, and verifying unfamiliar services before providing any personal information. Users should also avoid installing unknown software or players required by streaming sites, especially files with .exe extensions. Employing strong, unique passwords and enabling multi-factor authentication on all accounts is also advised.
Individuals who have already entered financial information into a fraudulent site should immediately contact their bank or card issuer to report the potential compromise. Changing any passwords created on the fake site and any reused passwords on other accounts is also critical. The FTC's IdentityTheft.gov website offers further guidance for victims of scams.