It is not uncommon for attackers to take advantage of popular movies or TV shows to bait victims into visiting a malicious site. Kaspersky has discovered a combination of more than 30 websites and social media accounts that claim to distribute a free copy of the newest Star Wars movie. In reality the site will steal credit card information when hopeful Star Wars fans attempt to register for the fake video streaming service portal. Additionally, the team at Kaspersky found approximately 65 malicious files disguised as “The Rise of Skywalker” along with accounts that were promoting the movie on malicious streaming sites. Instead of a viewing of the new movie, malware was the star of the show when users attempted to download copies. Kaspersky stated, “So far, 83 users have already been affected by 65 malicious files disguised as copies of the upcoming movie.” That number may continue to rise through the weekend.
Analyst Notes
Even though it’s enticing, suspicious links promising a prerelease viewing of a new movie or tv show should not be clicked on. The type of file downloaded should also be checked—movies or videos should never be .exe files. Always verify a website’s authenticity as well before providing any financial information or attempting to watch videos on the site. Monitor credit card statements closely and sign up to receive text alerts whenever a charge is made, reporting fraudulent charges to the bank quickly. Lastly, make sure to use a reliable anti-malware solution and keep it updated. More information can be found here: https://www.bleepingcomputer.com/news/security/fake-star-wars-streaming-sites-steal-fans-credit-cards/
