Oscars 2026: Malware targets film fans seeking free movies

A new cyber threat, dubbed Efimer, is targeting film enthusiasts eager to watch the 2026 Oscars Best Picture nominees before the awards ceremony. Security experts have identified that malicious actors are exploiting the popularity of these films by hosting malware on fake websites. These sites are often found through Google searches, with hackers weaponizing SEO to lure unsuspecting users.

Instead of providing access to desired movies, these compromised sites prompt users to install a "special player," which is actually the Efimer malware. Once active, the malware can steal cryptocurrency, passwords, and other personal data. A particularly concerning capability is its ability to monitor clipboard activity and silently replace cryptocurrency recipient addresses during transactions, diverting funds to attackers.

The campaign is specifically targeting Windows users. Experts advise caution when clicking on suspicious links and emphasize the importance of having updated antivirus and firewall software installed. The malware has been distributed using all Best Picture nominees as lures, with "Marty Supreme" being the most frequently used, followed by "Bugonia" and "Sinners."