News

The Odyssey hit theaters Friday. The scams were ready by Monday.

Scam sites and a fake movie file appeared within hours of release. Two rules protect you, and neither needs technical skill.

Christopher Nolan's The Odyssey pulled in $264 million worldwide on its opening weekend. Making it the biggest global debut of his career. A year of ticket presales made that large number a safe bet, and that is exactly what the scammers were counting on.

Researchers at Malwarebytes found two of the scammers' traps already built and waiting for anyone searching for a free copy. You don't even have to be on a pirating website. You just have to be the person, or a parent of the person, who types "watch The Odyssey free" into a search box.

The fake browser warning

The first scam lives on cloned torrent sites, dressed up with the movie's real artwork and cast listings. Land on one and a pop-up appears: "Browser Issue Detected." A missing component is supposedly blocking full access, and a big "Fix It Now" button offers to solve it.

There is no missing component. The warning comes from the webpage itself, drawn with the same code as everything else on the page, which is why your browser doesn't stop it. From the browser's point of view, nothing is wrong. A page is allowed to show you a picture of a warning.

Click "Fix It Now" and you get bounced through advertising redirects toward whatever the ad network is serving that minute: a fake browser extension, a fake tech support page with a phone number to call, or a malware download. Malwarebytes found the same pop-up, identical wording and layout with only the colors changed, across multiple cloned sites. Nobody hacked these sites, they were built for this, ahead of time.

If this sounds familiar, it should. It's the same idea as the fake CAPTCHA scam and the fake update pop-ups police raided in June. Invent a problem, offer the solution, and let the worried user's click do the damage.

The movie that isn't a movie

The second scam is a download advertised as a 1080p copy of the movie, listed with 597 seeders (the people supposedly sharing the file, a number that reads like a crowd vouching for it). The file even wears VLC Media Player's orange traffic cone icon. Underneath that icon sits a Windows program, and double-clicking it runs that program with your full user permissions. Malwarebytes didn't say what this particular one installs, because it varies. The usual target for campaigns like this is a password stealer that grabs everything saved in your browser.

Real movie files end in .mp4 or .mkv, open in a media player, and never ask to install anything.

Windows makes this harder to spot than it should be, because it hides file extensions by default. Most people would see "The Odyssey 2026 1080p WEBRip" under a familiar media player icon, and the .exe that gives the file away would never appear on screen. The scammer forges the icon, and Windows hides the indicator that it's fake.

Why the trap was ready so fast

Malwarebytes' explanation is economic. A $250 million movie with a year of ticket presales behind it is guaranteed traffic. So the scam sites surfaced within hours of release day instead of weeks later. This wave was predictable. The same thing hit Barbie and Oppenheimer in 2023. Also, a trojan bundled with fake Super Mario movie downloads that year had been used more than 150,000 times against similar bait, according to ReasonLabs. The infrastructure gets built before the premiere, then sits waiting for opening weekend.

Where to watch

The Odyssey is in theaters only. Universal hasn't announced a digital release, and based on Nolan's past films a paid rental option will probably land around November, with streaming sometime next year. Until then, a legitimate free stream cannot exist. Every result that promises one is a scam, by definition. You don't have to inspect a file or judge a website. The search itself is a trap.

I'm not going to lecture anyone about piracy, and this piece isn't a guide to pirate better either. The people landing on these pages are anyone's kids and grandkids on the family computer, not seasoned torrent users. And on that computer every saved password in the household is one double-click away.

A few steps you can take

Turn on file extensions. Open File Explorer, click 'View', then 'Show', then check 'File name extensions'. It costs nothing, and a fake "movie" shows its .exe immediately.
Treat any warning inside a webpage as part of the page. Close the tab instead of clicking. Real browser warnings don't come with a "Fix It Now" button.
If you clicked one anyway, check your browser for extensions you don't remember installing, remove anything unfamiliar, and run a full malware scan.
If you ran a "movie" that turned out to be a program, disconnect that computer from the internet, scan it, and change your passwords from a different device, email account first. A password manager makes that rebuild a lot faster.

The limits

Malwarebytes is the only vendor documenting these particular scams so far, and "within hours" is their wording of the timing. The release-window fact doesn't depend on them, though. There is no legal way to watch this movie at home right now, and that alone settles every "free stream" offer. When the movie does hit digital in a few months, that rule relaxes. But the .exe rule never relaxes. A movie ending in .exe is never going to be a real movie.