- Moviegoers are the target of Efimer malware before the 2026 Oscars
- Malware hosted on fake sites for Best Picture nominees
- Efimer can steal cryptocurrencies, passwords and more
Movie fans looking to catch up on the year's best films ahead of the 2026 Oscars have been warned to be on guard against new cyber threats.
Experts in cyber news have revealed a malware campaign called Efimer, targeting people searching online for illegal downloads of this year's Best Picture nominees.
Anyone looking for their fix marty supreme, sinners either Bugonia In reality, they risk having their information and online accounts hacked, experts warn.
Article continues below.
Ephemer on the hunt
In his review of the campaign, cyber news noted that Efimer is “a classic honeypot” aimed at those who want to make sure they don't miss the biggest movies of the year.
“Instead of a high-definition copy, they download a script that will try to empty their digital wallets,” experts say.
Unusually, the Efimer danger comes not from torrent sites, but from Google search, where unsuspecting film fans can find themselves clicking on a link to a malicious site claiming to host the best movies.
In reality, hackers have weaponized SEO by hijacking vulnerable WordPress sites to spread malware, as legitimate business sites have been compromised through brute force attacks to host fake torrent landing pages.
In total, 12.11% of Google results turned out to be malicious, since, according to researchers, Efimer has used each of the 2026 Best Picture nominees to expand its network: Marty Supreme was the most popular lure with 16 malicious links, followed by Bugonia with 15 and Sinners with 12.
Once on the malicious site, victims are told that they need to install a “special player” to watch the movie, but in reality it is Efimer malware in disguise. Once installed, Efimer monitors the user's clipboard and, when it detects that the victim is about to send a cryptographic transaction, it silently replaces the recipient's address with that of the attacker.
The campaign only targets Windows users, who are told to be suspicious when clicking on unusual links and to ensure they have robust and reliable antivirus and firewall software installed and updated to the latest version.
The best antivirus for all budgets
Follow TechRadar on Google News and add us as a preferred source to receive news, reviews and opinions from our experts in your feeds. Be sure to click the Follow button!
And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form and receive regular updates from us on WhatsApp also.
