Planning to Subscribe to Netflix? Beware! Don’t Fall Victim to This Scam

New Delhi (The Uttam Hindu):Hackers are now exploiting Netflix's subscription renewal process in a new phishing scam, aiming to steal personal and financial information from users worldwide. With cyber scams becoming an increasingly serious threat, users are being warned to stay alert and safeguard their personal data against these deceptive tactics. This particular scam has affected users in 23 countries, including the United States, Germany, Spain, and Australia.

According to Bitdefender, a cybersecurity firm that raised the alarm, scammers are sending fraudulent SMS messages to Netflix users, claiming issues with payment processing. These messages attempt to create urgency and trick recipients into clicking on malicious links in an effort to resolve the supposed payment problem. Examples of such messages include:

>"NETFLIX: There was an issue processing your payment. To keep your services active, please sign in and confirm your details at https://account-details[.]com."

>"Your last payment was declined. Update your payment information at: https://homepage-nflix[.]com."

These phishing attempts are often region-specific, using local languages and Netflix branding to appear authentic. While some messages contain noticeable grammatical mistakes, many are convincing enough to deceive unsuspecting users.

When users click on the links, they are redirected to phishing websites that mimic Netflix's official login page. Once on these sites, cybercriminals steal sensitive information, including usernames, passwords, personal details, and credit card data. The stolen information is often sold on the dark web, leaving victims vulnerable to identity theft and financial fraud.

Netflix’s popularity makes it an easy target for cybercriminals. Like WhatsApp, which is a major messaging platform, Netflix is one of the leading OTT services and is therefore an attractive target for hackers. Unlike platforms with two-factor authentication (2FA), Netflix accounts are more susceptible to credential stuffing, where hackers use stolen login credentials from one service to access accounts on other platforms.

While no cases have been reported in India yet, Netflix users are urged to be cautious and not fall victim to these scams.

Tips to Stay Safe:

>Avoid clicking on links in unsolicited messages. If you receive a suspicious SMS or email about your Netflix account, manually type Netflix’s official website into your browser to verify your account.

>Be cautious of messages that convey urgency or threaten to suspend your service. Legitimate companies rarely use such tactics.

>Look for red flags like unknown sender IDs or poorly written language. Even well-crafted messages should be approached with caution.

>If you have clicked on such a link and entered your details, immediately change your Netflix password, as well as the passwords of any other accounts where the same credentials may have been used.