Kaspersky experts warned a surge in scams while using the hype and popularity of Oscars 2023 to deceive people. Scammers created fake websites offering free streaming of Oscar-nominated movies, prompting users to give away their personal and banking information and download malware.
Kaspersky experts identified various websites that claimed to offer free streaming of these movies but steal users’ money instead. To access the movies, users are ‘required’ to pay a small subscription fee. Once the payment is made, users become vulnerable to unauthorized transactions that are either charged at equal intervals, resembling an uncancelable subscription, or in small daily increments until the account is drained.
The highly anticipated Avatar sequel has been used by scammers who have developed several deceitful tactics to trick users into downloading or watching the movie, including giveaway rackets. The scheme works by directing users to a fraudulent website where they are prompted to confirm that they are not a bot/robot by completing surveys for rewards. Once a user clicks the ‘play’ button, they are greeted with a message congratulating them on winning a prize of their choice, which may include a financial reward, H&M or IKEA vouchers, or a PS5 console.
The primary objective of the deception is to extract money from the user by requesting a commission fee for sending the prize. Additionally, the scammers collect personal information such as the user’s name, email address, and phone number with the promise of a financial reward or a gift certificate. This information may be used for identity theft or sold on the Dark web for malicious purposes.
“The Oscars 2023 ceremony is lucrative for cybercriminals who intensify their malicious activity every year. It’s crucial to be extra cautious during this event and double-check the authenticity of any website offering free streaming of movies. Don’t fall for fake websites or giveaway scams that trick users into giving away their personal information. Always use reputable streaming services and double-check website authenticity,” comments Olga Svistunova, security expert at Kaspersky.
