Lures dressed up to look like movie and TV streaming offers are swiping payment data.
The past year’s massive migration of movie and television audiences to streaming services has provided scammers with a sweet opportunity to launch phishing attempts to lure would-be subscribers into giving up their payment information.
Where there’s payment data, cybercriminals are sure to follow, Kaspersky’s Leonid Grustniy pointed out in his latest report, warning about phishing campaigns disguised to look like Netflix, Amazon Prime and other streaming service offers.
“Streaming services offer a variety of payment plans, but generally they all involve paying with a credit card,” Grustniy explained. “And where there are card details, there is phishing.”
Scam Subscriber Targeting
Kaspersky’s researchers observed various lures aimed at targets, depending on their current streaming subscription status. Fake sign-up pages for services like Netflix were used to pry email addresses and credit-card information from victims.
“Armed with your info, they can withdraw or spend your money right away; your email address should come in handy for future attacks,” Grustniy wrote.
Current Netflix subs were sent a phishing email requesting they update their billing information.
“We’re having some trouble with your current billing information,”