The threat actors never miss a chance to execute their malicious activities. What else could provide a better opportunity for them than the launch of a popular movie! Reportedly, another phishing scam has come into play that tricks users by offering Avengers: Endgame download for free. The recent scam comes right after the phishing scam that leverages the fandom for Game of Thrones.
Free Avengers: Endgame Download Scam
Researchers at Kaspersky Lab have discovered a phishing scam going around that tricks ‘Avengers: Endgame’ fans. The scam offers free of cost Avengers: Endgame download, that eventually pilfers your credit card details. This scam especially threatens those desperate fans willing to get the movie on streaming services as early as possible.
As stated in their blog post, the scam website appears among the search results whenever a user looks for the movie online. The site either promises a full download or online streaming.
Initially, the site bluffs the users by beginning streaming. However, after some time, it asks the user to create an account, and then, to enter credit card details for validation.
“The account has to be validated. That requires the user’s billing information and credit card details including the CVC code printed on the back of the card.”
Nonetheless, the site never shows a movie stream. Rather simply tricks the user by displaying some trailer, and you end up losing your information to the scammers.
Enjoy Movie, But Don’t Forget Your Security
Even after you leave the scam website, you have already handed over your data to the bad actors and compromised your security on several fronts. They can possibly use your email address and password to compromise your other accounts, including your accounts on online stores, and your social media profiles. You are particularly vulnerable if you have a habit of using the same email address and passwords across multiple accounts. Whereas your credit card information is a treasure trove for them.
Therefore, while you may want to enjoy the movie, make sure not to compromise your online security.
Let us know your thoughts in the comments section.