As people around the globe look forward to the Oscars this Sunday, internet security experts are warning of a surge in scams that use the hype and popularity of the awards to deceive people.
Scammers are creating fake websites offering free streaming of Oscar-nominated movies, prompting users to give away their personal and banking information and to also download malware. Experts have identified various websites claiming to offer free streaming of these movies but, instead, steal users’ money.
To access the movies, users are required to pay a small subscription fee. Once payment is made, they become vulnerable to unauthorised transactions that are either charged at equal intervals, resembling a noncancellable subscription, or in small daily increments until the account is drained.
The highly anticipated “Avatar” sequel, for example, has become a target for scammers who have devised several deceitful tactics to trick viewers into downloading or watching the movie, including giveaway rackets.
The scheme works by directing users to a fraudulent website where they are prompted to confirm their “humanity” by completing surveys that offer a variety of prizes. Once a user clicks the “play” button, they are greeted with a message congratulating them on winning a prize of their choice, which may include a financial reward, H&M or Ikea vouchers, or a PlayStation 5 console.
The primary objective of the scam is to extract money from the user by requesting a commission fee for sending the prize. Additionally, the cybercriminals collect personal information such as the user’s name, email address, and phone number with the promise of a financial reward or gift certificate.
This information may then be used for identity theft or sold on the dark web for malicious purposes.
To avoid falling victim to fraud, everyone is advised to:
- pay attention to official movie release dates in cinemas or streaming services;
- check the authenticity of websites before entering personal data, and only use official webpages to watch or download movies;
- double-check URL formats and company name spellings;
- use a reliable security solution that identifies malicious attachments and blocks phishing sites; and
- avoid links promising early viewings of content.
If you have any doubts about the authenticity of content, check with your entertainment provider.