Former Pirate Website ‘FMovies’ Linked to Malware Campaign

The former popular pirate website ‘FMovies’ has been strongly linked to a malware campaign targeting users worldwide.

Microsoft Threat Intelligence identified a large-scale malvertising campaign that infected almost one million devices for the purpose of stealing information.

The attack originated from unverified streaming websites like ‘FMovies’ where cybercriminals embedded malicious redirectors to harvest user data.

FMovies was shut down by anti-piracy authorities in 2024 and was reported to have more than 374 million visits per month.

How The Malware Attack Worked

The malware campaign used a sophisticated multi-layer approach. Embedded redirectors generated pay-per-view/pay-per-click revenue from malvertising platforms and subsequently routed traffic through one or two additional malicious redirectors, ultimately leading to another website, such as a malware or tech support scam website.

Users were then redirected to GitHub where attackers hosted first-stage malware payloads. The additional payloads included information stealers to collect system and browser information on the compromised device, of which most were either Lumma stealer or an updated version of Doenerium.

What Data Was Stolen

The malware targeted valuable personal information. The malware scans for cryptocurrency wallets, including Ledger Live, Trezor Suite, KeepKey, BCVault, OneKey, and BitBox, indicating potential financial data theft. Hackers also stole passwords, browsing history, and screenshots from infected machines.

Scale of Impact

The campaign impacted a wide range of organizations and industries, including both consumer and enterprise devices, highlighting the indiscriminate nature of the attack.

Corporate accounts proved especially valuable targets for cybercriminals seeking high-value information.

Hudson Rock currently reports over 32.2 million infected machines and over 4.8 million compromised employees across various industries.

Final Thoughts

This massive malware campaign shows the real dangers lurking on unverified streaming websites. While users think they’re just watching free movies, cybercriminals are busy stealing their most sensitive data.

The FMovies connection proves that even the most popular pirate sites can put millions of users at risk.

For those who choose to visit unofficial streaming platforms, using strong antivirus software, a secure VPN, and avoiding suspicious links remains critical for staying safe online.

For more information on this story, refer to the data from Hudson Rock and the report from TorrentFreak.

We want to know your thoughts. What do you think about this story? Let us know in the comment section below!

Be sure to stay up-to-date with the latest streaming news, reviews, tips, and more by following the TROYPOINT Advisor with updates weekly.