Newest entry to the Avengers franchise entering the cinemas did not only results in giant ticket sales but also have led to increased number of phishing attacks.

Cybersecurity experts have noted a number of phishing attacks in which Avengers fans were targeted. Cybercriminals have prepared fake websites, where they offered the “opportunity” to watch the finale of the Avengers movie for free.

If any of the movie’s fans clicked on the video icon, a short scene from the movie appeared onscreen, but it was cut out from the official trailer. After a few seconds of playback, the victim is redirected to the registration page, where it is required to provide the credit card number along with the CVV2 code. In fact, the data goes into the hand of the cybercriminals and can be used to derive funds from the victim’s account.

As Kaspersky Lab mentions, cybercriminals feed on social engineering. The temptation to watch the movie earlier before the official release date is stronger from the common sense.