Hackers targeting Netflix subscription renewals to steal money

Cyber scams are on the rise worldwide, with criminals devising increasingly sophisticated methods to exploit unsuspecting users. A recent scam has targeted Netflix subscribers globally, using fake subscription renewal messages to steal sensitive personal and financial information. Security experts report that the scam has already impacted users in 23 countries, including the United States, Germany, Spain, and Australia.

Cybersecurity firm Bitdefender flagged the scam, revealing that it begins with fraudulent SMS messages claiming issues with Netflix account payments. The messages are designed to create a sense of urgency, urging recipients to click on malicious links to resolve the supposed problem. Examples of these messages include:

·       “NETFLIX: There was an issue processing your payment. To keep your services active, please sign in and confirm your details at: [malicious link].”

·       “Your last payment was declined. Update your payment information at: [malicious link].”

The messages often appear region-specific, using local languages and Netflix branding to enhance credibility. While some are poorly written with grammatical errors, others are polished enough to deceive even cautious users.

Clicking the fraudulent link redirects users to a phishing website that mimics Netflix’s official login page. Once users input their credentials, cybercriminals gain access to usernames, passwords, and financial details. This information is frequently sold on the dark web, increasing victims’ risks of identity theft and financial fraud.

Netflix’s widespread popularity makes it a prime target for cybercriminals, similar to other major platforms like WhatsApp. Unlike services with two-factor authentication (2FA), Netflix accounts are particularly vulnerable to credential-stuffing attacks, where stolen credentials from one platform are used to access others.

While no confirmed cases have emerged in India yet, experts urge Netflix users to stay vigilant and follow these protective measures:

1.     Avoid clicking on suspicious links: If you receive messages claiming an issue with your account, visit Netflix’s official website directly by typing the URL into your browser.

2.     Beware of urgent language: Messages that pressure you to act immediately are often scams. Legitimate companies rarely send such communications.

3.     Check for warning signs: Look for unknown sender IDs, poor grammar, or unofficial links in messages. Even polished messages should be treated cautiously.

4.     Act quickly if compromised: If you accidentally click a malicious link and share your information, change your Netflix password immediately and update other accounts using the same credentials.

Netflix users worldwide are advised to remain cautious and report suspicious messages to help curb the spread of such phishing scams.