- Movie fans targeted by Efimer malware ahead of Oscars 2026
- Malware hosted on bogus Best Picture nominee websites
- Efimer can steal crypto, passwords and more
Film fans looking to catch up on all the year’s top films ahead of the 2026 Oscars have been warned to be on the lookout for new cyber threats.
Experts at CyberNews has uncovered a malware campaign called Efimer that targets people searching online for illegal downloads of this year’s Best Picture nominees.
Anyone looking for their fix of Marty Supreme, Sinners or Bugonia actually exposing themselves to having their information and online accounts hacked, the experts warn.
The article continues below
Ephemers on the hunt
In their write-up of the campaign, CyberNews noted how Efimer is “a classic honeypot” aimed at those who want to make sure they haven’t missed the biggest movie of the year.
“Instead of a high-definition rip, they download a script that will try to empty their digital wallets,” the experts say.
Unusually, the danger of Efimer does not come from torrent sites, but from Google search, where unsuspecting movie fans can find themselves clicking on a link to a malicious site pretending to host top movies.
In reality, hackers are weaponizing SEO by hijacking vulnerable WordPress sites to spread malware, as legitimate business sites have been compromised through brute-force attacks to host fake torrent landing pages.
In total, 12.11% of Google’s results were found to be malicious, as the researchers say Efimer has used every Best Picture 2026 nominee to widen its net – Marty Supreme was the most popular lure with 16 malicious links, followed by Bugonia with 15 and Sinners with 12.
Once on the malicious site, victims are told to install a “special player” to watch the movie, but this is actually the Efimer malware in disguise. Once installed, Efimer monitors the user’s clipboard and when it detects that the victim is about to send a crypto transaction, it silently replaces the recipient’s address with the attacker’s.
The campaign only targets Windows users, who are told to be suspicious when clicking on unusual links and ensure they have robust and reliable antivirus and firewall software installed and updated to the latest version.
The best antivirus for all budgets
Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews and opinions in your feeds. Be sure to click the Follow button!
And of course you can too follow TechRadar on TikTok for news, reviews, video unboxings, and get regular updates from us on WhatsApp also.
