Netflix subscribers are warned that they are the target of a dangerous SMS phishing campaign
In this article (5)
It’s absolutely nuts to think that more than 13 years and five months ago we were telling you about the Netflix app becoming available for the Motorola DROID and DROID X from the Android Market. We’ve gone from Android 2 to Android 15, the Android Market is now the Google Play Store, Netflix now offers a wide range of original content, and Motorola is trying to recapture the magic that made it and HTC early leaders among Android phone manufacturers.
One thing that we didn’t worry about too much back in 2011 that we worry about now is the possibility of getting scammed by phishing attacks. These are emails or texts that are made to look as though they were sent from a company you do business with asking you to reveal personal information. Cybersecurity researchers are reporting that hackers are running an SMS phishing campaign against Netflix subscribers that seeks to access their Netflix accounts and steal information about the credit cards used to pay for the service.
“We will never ask you to enter your personal information in a text or email. We will never request payment through a 3rd party vendor or website”-Netflix statement
These bogus texts make it appear as though a subscriber’s account was placed on hold and ask the subscriber to update his/her information by clicking on a link. Here’s the scary part. This link will take the victim to a website that looks remarkably like the real Netflix site with a prompt asking for login and credit card information. If the information they request is provided to them, the scammers will take over control of the victim’s Netflix account and will have the ability to use his/her credit card and wipe out the remaining credit available.
“The security firm says that it spotted this campaign running in 23 countries, including the United States, since September.”
Security experts are warning Netflix subscribers to be on the lookout for any texts or emails stating that their Netflix account is on hold or will soon be suspended. Other texts accuse the subscriber of not paying for the service and urgently demand payment by threatening to cancel the account. Do not press on any links that are included in the text or email. You might be able to tell that the text and website are fakes since they are usually loaded with grammatical and spelling errors.
The phishing campaign was discovered by cyber security firm Bitdefender. The security firm says that it spotted this campaign running in 23 countries, including the United States, since September. If you do receive this text, ignore it and delete it.
Questions & Answers
Q.What is the primary goal of the SMS phishing campaign targeting Netflix subscribers?
What is the primary goal of the SMS phishing campaign targeting Netflix subscribers?
Hackers aim to gain access to victims' Netflix accounts and steal credit card details used to pay for the service. This allows them to take control of the account and potentially use the credit card.
Q.What specific actions do the fake SMS messages typically ask subscribers to take?
What specific actions do the fake SMS messages typically ask subscribers to take?
The bogus texts usually claim a subscriber's account is on hold or suspended and demand an update of information. They often contain a link to a fake website that prompts for login and credit card details.
Q.Which cybersecurity firm identified this SMS phishing campaign?
Which cybersecurity firm identified this SMS phishing campaign?
The cybersecurity firm Bitdefender discovered the phishing campaign. They reported spotting it active in 23 countries, including the United States, since September.
Q.What advice does Netflix give regarding requests for personal information via text or email?
What advice does Netflix give regarding requests for personal information via text or email?
Netflix states it will never ask subscribers to enter personal information in a text or email. They also confirm they will not request payment through a third-party vendor or website.