Fraudsters Deploy Fake Streaming Sites to Harvest Bank Data From Movie Enthusiasts

Criminals are operating sophisticated fake streaming platforms capitalizing on the summer box office success of Christopher Nolan’s The Odyssey, which Universal Pictures released in July. These fraudulent websites promise free access to the film but ultimately aim to capture financial data and personal information from visitors who register accounts. Security researchers including those at Kaspersky have documented the scam operating across multiple languages and locales.

The scheme operates through a deceptively simple progression. Potential victims encounter polished-looking websites offering free streaming access, often arriving through paid advertisements or search engine results. After clicking to watch, users encounter a registration page requesting basic information like name and email address. The site then escalates demands by requesting credit card details under the guise of activating a free trial period.

Malwarebytes discovered additional malicious tactics deployed within hours of the film’s theatrical release. Researchers identified cloned piracy websites displaying fake browser warning messages, along with deceptive download files labeled as video content but actually containing Windows executable programs. Clicking certain prompts directed users toward malvertising networks where outcomes varied based on active advertising campaigns.

The Federal Trade Commission has specifically warned that websites offering complimentary movies and television programs frequently distribute malware capable of stealing login credentials, usernames, passwords, and bank account information. Similar scams emerged during the Barbie film craze, demonstrating that criminals consistently recycle this strategy whenever major entertainment releases generate significant public interest.

Consumers should verify movie availability through official studio websites and established streaming platforms rather than unfamiliar services. Domain names warrant careful inspection, as scammers often employ slight spelling variations mimicking legitimate services. Website reviews posted on the fraudulent sites themselves should be disregarded, and users should never enter payment information without independently researching the service through separate browser tabs.

Antivirus software provides an important defensive layer against malicious downloads and dangerous websites. Users should also employ unique passwords managed through password management tools and activate multi-factor authentication on critical accounts. Any website requesting software installation before allowing video playback, or offering downloads with .exe file extensions, represents an immediate warning sign requiring immediate departure from the site.