Kaspersky Detects Global Scam Campaigns Exploiting the Release of Avatar 3
Kaspersky has identified a wave of cyber-scam activity linked to the global release of Avatar 3, as heightened online interest surrounding the movie premiere is being exploited by cybercriminals across multiple regions.
According to Kaspersky experts, the launch of Avatar 3 in several countries has triggered a surge in fraudulent websites offering unauthorized online access to the film. These malicious campaigns appear to target users worldwide, signaling a coordinated effort by attackers to capitalize on the movie’s popularity and fans’ eagerness to watch it online.
The scam typically involves the creation of suspicious websites claiming to stream Avatar 3. Cybercriminals place strong emphasis on localization, publishing these sites in multiple languages to appeal to audiences in different countries. However, many of the translations are poorly executed and contain grammatical errors and inconsistencies, which can serve as warning signs of fraudulent activity.
When users attempt to play the movie, they are shown a fake media player and prompted to register for “full” or “unlimited” access. During this process, victims are asked to submit personal information such as email addresses and mobile phone numbers. In later stages, scammers may request payment details under the pretext of activating a “free trial,” exposing users to the risk of credential theft and potential financial losses, particularly if passwords are reused across multiple services.
“Cybercriminals consistently exploit major movie premieres to capture users’ attention and increase the effectiveness of their schemes,” said Olga Altukhova, Senior Web Content Analyst at Kaspersky. “We strongly advise users to access films only through official platforms, remain cautious of websites requesting personal or payment information, and use reliable security solutions to protect all devices, including mobile phones.”
To help users avoid falling victim to such scams, Kaspersky recommends the following measures:
Verify the authenticity of websites before entering any personal data and use only official platforms to watch movies. Carefully check website URLs and company name spellings.
Choose reputable and authorized streaming services to reduce the risk of data theft and misuse.
Use a trusted security solution, such as Kaspersky Premium, which can detect malicious content and block phishing links. In 2024 and 2025, Kaspersky Premium achieved a 93% phishing detection rate with zero false positives in AV-Comparatives tests and received the “Approved” certification.
Enable multi-factor authentication (2FA) on accounts such as Apple ID and financial applications, and regularly monitor account statements for suspicious activity.