With the increased interest in and availability of movie and TV streaming services, plenty of new scams are popping up attempting to steal personal details and credit card information.
This year, we’ve seen for the first time brand new movies being sent to both theaters AND direct to paid streaming services. It’s one of the reasons there is so much uptick in streaming service use. But, according to security researchers at Kaspersky, more streaming service-related scams are popping up, with Netflix in particular. We’ve seen Netflix top the charts of impersonated brands last year, and giving the rise in interest in streaming services this year, it makes sense that the Netflix brand is being misused for nefarious purposes. According to the article, scammers are using one of two themes to attract the attention of would-be victims:
- An opportunity to subscribe – using little more than a great deal as an incentive, scammers create realistic-looking landing pages used to capture victim’s personal and payment details, such as the one below.
Source: Kaspersky
- A payment issue with an existing account – Netflix users can be easily tricked with a “there was a problem with your payment method”-type of email (shown below), with the scam ending in the victim offering up their credit card details.
Source: Kaspersky
These attacks can just as easily use social engineering tactics that get victims to download and open PDF documents, Office documents, or malicious email attachments, making the use of the impersonated brand a particularly dangerous aspect of a phishing scam. With the brand known to the victim, defenses are down when interacting with the email received. Users need to be educated using Security Awareness Training to be vigilant when receiving emails from well-known brands they trust. Anything unexpected should be addresses with a dash of mistrust.
