Cyber Crime & ForensicCyber SafetyPress Release

Deceptive Wonka: Beware the Unwelcome Golden Ticket

If you’re a sweet-toothed dreamer excited about the magical arrival of “Wonka”, there are some unexpected, and not very delectable, online ‘tickets’ you should not open. Kaspersky’s experts have uncovered cybercriminals using the popularity and buzz around the film ahead of its release in cinemas this season to distribute online phishing scams. Preying on unsuspecting movie buffs, instead of sweet delights, Wonka fans are being tricked into handing over their sensitive personal data and money.


At first glance, the “Wonka” streaming service uncovered by Kaspersky appears authentic

Offering free streaming of the timeless movie story ahead of a worldwide general release, scammers are using the survey site “surveymonkey” to lure fans of the mystical chocolatier with an offer to watch Wonka. A few moments after clicking on a link to a fake site, rather than seeing a world of pure imagination and a film that has not yet been released, users are greeted with what appears to be a harmless request to register to watch the full film.


Fraudsters fake offer to watch “Wonka” published recently on surveymonkey, an online survey website

The site directs unsuspecting fans to a pop-up screen, supposedly to create an account, asking for a bank card and personal identification number, as well as details like name, address, phone number, and other sensitive data. This is a red flag that enables the unauthorized creation of difficult-to-cancel debits from the users’ accounts.


“Wonka” fans are greeted by a film description and authentic looking introduction to the cast

In addition to the financial risks of sending their money and private data directly to fraudsters, unsuspecting Wonka fans also face the prospect of their stolen information potentially being sold on the dark web.


The fake streaming service includes a red flag pop-up service registration requiring personal financial information

“Like the bad guys in Wonka, sinister scammers have wasted no time in exploiting people’s passion for Willy Wonka’s fairytale magical world for their own sinister motives. To ensure this make-believe world stays just that, it’s important that people remain alert follow basic online safety rules and they don’t overlook risks. We’re urging chocolate film fans to practice safe online habits so they can enjoy Wonka and other movie premiers whilst protecting themselves and their privacy from cyber criminals,” comments Egor Bubnov, Senior Web Content Analyst at Kaspersky.

To stay safe while enjoying the excitement surrounding movie premieres, Kaspersky experts recommend:

  • Be cautious of phishing scams: Beware of suspicious emails, messages, or websites offering exclusive deals or freebies. Double-check the authenticity of the source before sharing any personal information or making online transactions.

  • Verify website security: When purchasing merchandise or accessing related content online, ensure that the website has a secure connection. Look for “https://” in the URL and a padlock symbol in the address bar to indicate a secure website.

  • Use security solutions: Use a reliable security solution, such as Kaspersky Premium, that identifies malicious attachments and blocks phishing sites.

  • Be mindful of sharing personal information: Be careful when providing personal information online, especially sensitive details like your address, phone number, or financial information. Only share this type of information on trusted and secure platforms.

Trust reliable sources: Rely on official websites, authorized retailers, and reputable sources for purchasing merchandise, accessing movie content, or obtaining information related to the premiere. Avoid unofficial or suspicious sources that may try to exploit your enthusiasm.

CSA Editorial

Launched in Jan 2018, in partnership with Cyber Security Malaysia (an agency under MOSTI). CSA is a news and content platform focusing on key issues in cybersecurity in the region. CSA is targeted to serve the needs of cybersecurity professionals, IT professionals, Risk professionals and C-Levels who have an obligation to understand the impact of cyber threats.

Related Articles

Leave a Reply

Your email address will not be published. Required fields are marked *