‘Netflix scam in 2023′: How hackers tried to steal users’ payment details – Times of India
Multiple reports in the past have suggested hackers are using sophisticated ways to trick people online. In one such case, a team of researchers have detected a cyber attack in which cybercriminals are targeting people with the intention of stealing their payment information.
As per a new report by Check Point Research, a team of researchers detected a phishing campaign during the first quarter of 2023. In the campaign, hackers spotted a fraudulent email that utilised Netflix‘s branding to deceive individuals.
“Criminal groups orchestrate phishing campaigns to get as many people to part with their personal data as possible,” said Omer Dembinsky, data group manager at Check Point Software.
“In some cases, attacks are designed to obtain account information, as seen with the Raiffeisen campaigns. Others are deployed to steal payment details, which we witnessed with the popular streaming service Netflix,” Dembinsky added.
Fraud through fake email
The email, which appeared to originate from “Netflix”, was sent from a fraudulent email address (support@bryanadamstribute[.]dk) with a subject line, “Uрdаtе rеquіrеd – ассоunt оn hоld”. The message in the email claimed that the recipient’s Netflix account had been suspended due to “a failure to authorise payment for the next billing cycle.”
The email also provided a link to renew the subscription and requested that the victim enter accurate payment details. “However, the link directed users to a malicious website with the intention of stealing their payment information,” the cybersecurity company said.
How to be safe online
Purportedly, most victims of such brand phishing attacks are those who are less tech-savvy. According to Dembinsky, the best defence against phishing threats is knowledge.
“Employees should be given appropriate training to spot suspicious traits such as misspelt domains, typos, incorrect dates, and other details that can expose a malicious email or link,” Dembinsky added.
As per a new report by Check Point Research, a team of researchers detected a phishing campaign during the first quarter of 2023. In the campaign, hackers spotted a fraudulent email that utilised Netflix‘s branding to deceive individuals.
“Criminal groups orchestrate phishing campaigns to get as many people to part with their personal data as possible,” said Omer Dembinsky, data group manager at Check Point Software.
“In some cases, attacks are designed to obtain account information, as seen with the Raiffeisen campaigns. Others are deployed to steal payment details, which we witnessed with the popular streaming service Netflix,” Dembinsky added.
Fraud through fake email
The email, which appeared to originate from “Netflix”, was sent from a fraudulent email address (support@bryanadamstribute[.]dk) with a subject line, “Uрdаtе rеquіrеd – ассоunt оn hоld”. The message in the email claimed that the recipient’s Netflix account had been suspended due to “a failure to authorise payment for the next billing cycle.”
The email also provided a link to renew the subscription and requested that the victim enter accurate payment details. “However, the link directed users to a malicious website with the intention of stealing their payment information,” the cybersecurity company said.
How to be safe online
Purportedly, most victims of such brand phishing attacks are those who are less tech-savvy. According to Dembinsky, the best defence against phishing threats is knowledge.
“Employees should be given appropriate training to spot suspicious traits such as misspelt domains, typos, incorrect dates, and other details that can expose a malicious email or link,” Dembinsky added.
For all the latest Technology News Click Here
For the latest news and updates, follow us on Google News.
Denial of responsibility! NewsUpdate is an automatic aggregator around the global media. All the content are available free on Internet. We have just arranged it in one platform for educational purpose only. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, all materials to their authors. If you are the owner of the content and do not want us to publish your materials on our website, please contact us by email – [email protected]. The content will be deleted within 24 hours.
