Cybercriminals are reportedly executing a phishing scheme that informs users their Netflix account has been suspended, enticing them to visit a fraudulent website designed to harvest their Netflix credentials and banking details. A security firm has highlighted the urgency instilled by the hackers to persuade individuals to disclose their payment information on these deceptive sites. Currently, Netflix does not provide two-factor authentication (2FA), which would offer additional security beyond just a password.
Compromised Netflix Accounts May Appear on the Dark Web
Recently, Bitdefender detected a phishing assault tailored to alarm users about potential account suspension due to a payment issue. The security firm reported that cybercriminals are utilizing this tactic to illicitly gain access to a victim’s Netflix username and password, while also collecting confidential banking information.
Cybercriminals guide users through the process of surrendering their login and banking details.
Photo Credit: Bitdefender
To execute the Netflix suspension scam, hackers dispatch text messages to victims claiming an issue occurred while processing their payment and urging them to sign in to “confirm” their details by clicking on a provided link. Those who do so are redirected to the fraudulent website.
To enhance the authenticity of the phishing site, the hackers request users to solve a simple math equation to prove they are not bots. However, a quick examination of the URL reveals it is not associated with Netflix’s official domain (netflix.com).
Once at the phishing site, users are instructed to input their email address and password, which is made to look like the official Netflix login page. This allows hackers to capture their credentials, as Netflix currently lacks any two-factor authentication measures.
Netflix user credentials are reportedly sold for as little as $2.99 on the dark web.
Photo Credit: Bitdefender
Following this, victims are presented with a page stating their account has been temporarily suspended due to billing issues with their primary payment method. They are then prompted to provide their credit or debit card information, including the card number, expiration date, and CVV code. Some hackers also offer an option to buy gift cards, available only in select countries.
Subsequently, the stolen credentials and credit card details are sold on the dark web. Bitdefender has shared screenshots illustrating that some of these credentials can be purchased for as low as $2.99 (approximately Rs. 250), and buyers can use cryptocurrencies for these transactions.
To safeguard their personal information from cyber threats, users are advised to trust only emails originating from the Netflix.com domain, which are sent via email and not SMS. It’s simple for users to verify the sender’s details. If they receive a suspicious message, they should manually navigate to the Netflix website by entering the URL directly into their browser and checking their account after logging in.
