Avengers Endgame download scam asks for users’ billing information

• Avengers Endgame download scam tricks Avengers fans into providing their email addresses, passwords, and billing information by promising full movie download.
• The website promises that users won't be charged and the information provided is only to ensure that the user is from a country where the website is “licensed to distribute” the content.

Scammers are taking advantage of the Avengers: Endgame movie that recently got released in theaters, and are tricking Avengers fans into providing their email addresses, passwords, and billing information by promising full movie download.

The big picture

A simple search for "Avengers; Endgame free download" leads to a website that promises users either a free download or an online viewing of the Avengers: Endgame movie.

• Upon clicking, the movie starts streaming, however, a message pops up asking users to ‘create an account’ to continue watching.
• To create an account, users are required to provide their email addresses and passwords.
• Upon which, users are then asked to provide their billing information such as credit card number, expiry date, CVV number, in order to validate the account.

The website promises that users won't be charged and the information provided is only to ensure that the user is from a country where the website is “licensed to distribute” the content.

However, creating an account doesn’t stream the full movie, instead collects users’ email addresses, and billing information.

“Most visitors would simply leave the site after being asked for their credit card details. However, the scammers have already won by getting an e-mail address and a password,” Kaspersky Lab said.

What you should do to stay protected?

• Experts recommend users to never provide any information on websites.
• It is recommended to never reuse passwords across multiple accounts.
• Always use complex and unique passwords that are difficult to crack and periodically reset passwords.
• It is best to install a good antivirus solution with protection from online scams and phishing.