When it comes to stealing your data, cybercriminals always have a new scam up their sleeve. One of their favorite tools is fake movie streaming websites. Given the popularity of movie streaming services, it’s not particularly surprising that criminal hackers have sought to lure unsuspecting users to their bogus sites.
At first glance, many of these fake websites look like legitimate streaming services like Netflix or Amazon Prime Video. However, upon closer inspection, they are not what they appear to be. Instead, the goal of these platforms is to install malware on your computer, allowing criminals to steal your personal information. Here’s what you need to know about the world of fake movie streaming sites.
BravoMovies: an example of pirate streaming
The fake BravoMovies streaming site is one of the most brazen attempts to trick users into installing BazaLoader malware on their computers. The cybercriminals behind the BravoMovies platform managed to create a realistic platform that mimics legitimate streaming websites and even displays movie titles on the landing page.
The hackers behind the fake streaming site used an email campaign to target users claiming their BravoMovies subscription was ending and if they didn’t act, their credit cards would be charged for a bundle premium.
The emails received by users did not include malicious links, harmful attachments, or anything else that would trigger Gmail alarms, allowing the emails to bypass Google’s security check.
They even included a phone number that users could call if they wanted to cancel their subscription. If a user called the number, they were connected to a call center controlled by the group. Instead of canceling their subscription over the phone, the person who answered directed users to the BravoMovies FAQ page, where users could cancel the service.
But the FAQ page instructed users to download an Excel file that activated the micros that installed BazaLoader on the target computer.
This isn’t the first time the group behind BravoLoader has created a fake website, but it is their first fake streaming movie site and the most complex website the group has created to date.
Since the group has had success with BravoMovies, they will likely create most of the fake websites in the future.
What is a fake hack?
Clicking on an email that tricks you into visiting a malware-infested hacker streaming website isn’t the only method cybercriminals use to trick you into giving up your personal information.
Fake hacking is another way a hacker can convince you to part with your data or money, and like the BravoMovie scam, it often involves hackers creating a fraudulent website. However, in this scenario, hackers want you to believe that your computer or device has been infiltrated by malware, even though it is not.
If a cybercriminal can convince you that you’ve been hacked, you might be tempted to transfer money, cryptocurrency, or something else of value to unlock your computer. Here are some ways a fake hacker can try to trick you into thinking you’ve been hacked:
- A pop-up window on your screen claiming that you have been hacked, your computer is infected with malware or ransomware. These pop-ups usually come from adware installed on your device.
- You receive an email stating that your computer has been hacked or that ransomware has been installed on your computer.
- They use a hacker typer: a website, app, or tool that can be used to trick someone into thinking they’ve been hacked.
- If you mistakenly visit a fake website, an alert may appear notifying you that your computer has been hacked and directing you to steps to fix the problem.
If you don’t know the signs to look for, it’s easy to fall victim to a fake hack, resulting in loss of money or the purchase of services you don’t need because you think they are for you. will help solve the hack. Anyone who asks you for money in exchange for freeing your computer from ransomware should report a possible fake attack.
If you have suffered a real hack, there will be noticeable changes to your system that will not appear during a fake hack. If your computer is working normally after someone claims to have hacked you, you are potentially dealing with a fake hack.
Don’t be tempted by fake streaming sites
From parodies of legitimate websites to pirate streaming sites like BravoMovies, there are always threats lurking online. Whenever you receive an email asking you to call a number to prevent your credit card from being charged for a service that you do not subscribe to or do not recognize, be sure to check that it is legit.
You should also be on the lookout for suspicious websites, often minor misspellings or an insecure URL (HTTP instead of HTTPS). If you think a website is fraudulent, do not click on any of the links. Cybercriminals will continue to refine their tools and create more compelling scams. Your job as a consumer is to do your best to thwart their attempts.
With so many websites online these days, it can be hard to tell which sites you can trust. So here are 11 signs that a website might not be trustworthy.
About the Author