Watch The Odyssey Free Online: Christopher Nolan’s The Odyssey has been in cinemas since July, IMAX screenings are sold out weeks ahead in many places, and there is no legal way to watch it at home. That gap between cinema release and digital availability is exactly what criminals wait for.
Researchers at Kaspersky, Bitdefender and Malwarebytes have each documented campaigns built around the film. They are not the same scam, and they fail in different ways, so it is worth understanding both.
Scam One: The Fake Streaming Site
Kaspersky has identified fraudulent websites in several languages promising free access to the film, as reported by The Guardian. Some select the language of the offer based on the visitor’s location and advertise a dubbed version, which makes the page feel
local and legitimate.
The pages are built to look like real streaming platforms, complete with fabricated user reviews and ratings from people claiming to have already watched it. Reach them through pop-up adverts, search results or links from other sites.
Press play and a fake video player appears, telling you to register to continue watching for free. It asks for an email address and full name first. Then it asks for card details. There is no film at any point in this process.
BeStreamWise, the UK campaign group that warns about illegal streaming, says anyone who submits their details risks being targeted again by fraudsters and having money taken from their accounts. Details harvested this way get resold and reused.
Scam Two: The Download That Is Not A Film
The second campaign targets people looking for a pirated copy rather than a stream, and it is the more damaging of the two.
Bitdefender reports that fake pirated copies are distributing Lumma Stealer, an information-stealing malware that goes after saved passwords, payment details and browser data. The company says its own telemetry shows users have already attempted to download malicious executables disguised as the film.
Malwarebytes, which found scams within hours of the film’s release, documented two main techniques. The first is a fake pop-up on piracy sites claiming your browser is missing a required component, with a button offering to fix it. Clicking it repairs nothing and routes you into a malvertising network that can lead to bogus browser extensions, tech support scams or further malware.
The second is simpler. Files presented as high-definition copies of the film are Windows executables wearing a video file’s icon, with misleading extensions and inconsistent metadata. Running one installs malware.
The Single Rule That Protects You
Here is the test that catches almost all of this.
A video file never asks for permission to run as a program. Real video files end in .mp4, .mkv or .avi and open in a video player. If a supposed movie file ends in .exe, asks to install something, or wants you to fix your browser first, close it immediately.
Malwarebytes makes a further point worth internalising: a high seeder count on a torrent proves nothing about safety. It only tells you many people are sharing the file, and plenty of them are unknowingly distributing malware.
Neither campaign exploits a software vulnerability. Both depend entirely on persuading you to take one more step. That is why they work, and why stopping at that step defeats them.
If You Have Already Handed Over Details
Kaspersky’s Olga Altukhova advises sticking to official services and checking the URL carefully before entering anything, particularly when an unfamiliar platform offers a film still running in cinemas.
If you think you have been defrauded, contact your bank immediately, then change passwords on banking, investment and pension accounts, and switch on multi-factor authentication.
In India, report cyber fraud on the National Cyber Crime Reporting Portal at cybercrime.gov.in or call the helpline on 1930. In the UK, the equivalent is Action Fraud.
None of this is novel. In 2025, researchers documented a nearly identical campaign built around fake downloads of Mission: Impossible – The Final Reckoning, also distributing Lumma Stealer through torrent sites.
The technique persists because it requires no sophistication. It needs only a title popular enough to guarantee search traffic. A $250 million IMAX production with a year of ticket pre-sales behind it is close to a perfect target, and the next one is already in production somewhere.
/images/ppid_59c68470-image-178653753417516467.webp)
