Kaspersky researchers have uncovered a fake movie streaming site that mimics a legitimate platform using Brad Pitt’s promotional images, luring users into linking bank cards for a free subscription—resulting in unauthorized withdrawals and no film access
The global premiere of F1: The Movie, the highly anticipated Apple Original Films release starring Brad Pitt, has sparked a wave of online scams, according to cybersecurity firm Kaspersky. Fraudsters are exploiting the film’s popularity by launching fake streaming websites and counterfeit giveaways, aiming to steal users’ money and personal data.
Kaspersky researchers have identified a fraudulent website masquerading as a free movie streaming platform. The site mimics a legitimate streaming interface, displaying promotional imagery of Brad Pitt and promising viewers a free subscription to watch the film. Victims are prompted to create an account and link a bank card to access the stream — a step that ultimately results in unauthorized withdrawals from their accounts. The movie, however, is never made available.
“Scammers frequently use websites that look authentic to mislead users,” warned Olga Altukhova, security expert at Kaspersky. “It’s important to check URLs carefully, avoid suspicious links, and use virtual cards with spending limits when making online transactions.”
Scammers exploit McDonald’s promotion
In another ongoing scam, cybercriminals have taken advantage of a legitimate promotional campaign by Apple and McDonald’s. In select Latin American markets, fans can purchase a Formula 1-themed McMenu and receive collectible miniature race cars tied to the film. Fraudsters are now circulating a counterfeit website offering the same toys for free in exchange for completing a quiz related to the movie.
The quiz, written in Portuguese, asks seemingly credible questions such as who stars in the film, where racing scenes were shot, and which famous F1 drivers were involved in the production. Regardless of answers, users are directed to a payment page to cover “delivery fees,” during which personal data and card information are harvested. The stolen data can later be used in phishing attacks or sold on the dark web.
“The quiz gives unlimited tries and always leads to a fake prize page,” Altukhova noted. “It’s cleverly designed to seem authentic, but it’s nothing more than a phishing trap.”
Kaspersky urges vigilance online
Kaspersky advises users to remain vigilant, especially during high-profile film or product releases. Key recommendations include verifying website authenticity, avoiding unsolicited offers, not sharing personal data on unverified sites, and using trusted security solutions.
The firm also encourages brands like Apple and McDonald’s to monitor for phishing attempts and educate their customers through official channels. As scammers continue to exploit trending content and trusted brands, a proactive, informed approach remains essential for both consumers and companies.
