Urgent warning to Netflix users over new scam that steals accounts and credit card information

Cybersecurity experts person uncovered an SMS phishing run targeting Netflix users successful an effort to bargain accounts and recognition paper information.

Hackers are sending fraudulent substance messages that assertion the unfortunate has failed to wage for their subscription and the relationship volition soon beryllium suspended.

A nexus is besides included that takes users to a beryllium designed to look similar Netflix's platform,  prompting them to springiness their login and recognition paper information.

Experts impulse Netflix members to beryllium vigilant erstwhile receiving communications from the streaming elephantine arsenic hidden signs constituent to transgression activity.

The connection utilized successful the messages is simply a dormant giveaway, specified arsenic grammatical errors, and links with presumption not associated with 'Netflix.'

Cybersecurity steadfast Bitdefender, which uncovered the scam, has identified the fake messages, including respective with misspelled words and unusual links.

'NETFLIX : There was an contented processing your payment. To keek your services active, delight motion successful and corroborate your details astatine : https://account-details[.]com,' 1 connection reads that features misspelled words.

Bitdefender has urged users to ne'er unfastened messages from chartless senders and if they do, bash not click links accompanied with the text. 

'We volition ne'er inquire you to participate your idiosyncratic accusation successful a substance oregon email,' Netflix said successful a connection astir the fishy substance messages.

'We volition ne'er petition outgo done a 3rd enactment vendor oregon website. If the substance oregon email links to a URL that you don't recognize, don't pat oregon click it.

Bitdefender recovered the scam has been moving chaotic successful 23 countries, including the US, since September.

Other countries being people see Germany, Spain, France, Greece and Australia.

'A large information occupation is that Netflix doesn't person 2FA (two-factor authentication) and lone relies connected usernames and passwords,' Bitdefender shared.

'This means that Netflix customers are precise exposed to relationship takeover attacks via credential stuffing.'

Many Netflix users who person received the fake messages person shared however others tin debar being scammed.

Miguel A. Calles, a information analyst, posted a connection helium received: Notice that 'http://netflix.com' is astatine the commencement of the domain. So it indispensable beryllium valid astatine archetypal glance, right?

'Did you announcement the code starts with “http://” alternatively of the “https://” that Netflix and different large companies enforce?'

He continued to explicate that criminals volition besides adhd '911' successful the URL to spark urgency among victims.

'Having this fig successful the code plays with our subconscious that we indispensable respond close away,' Calles added, urging users to ne'er click links from chartless substance connection senders.

But if users accidentally click the link, Bitdefender explains the lengths criminals spell to bargain your information and money.

'Funnily enough, they archetypal privation to spot if you're a robot. This is apt done to springiness imaginable victims a mendacious consciousness of information and to reenforce the content that they are visiting an authoritative website,' the steadfast shared.

'The adjacent measurement is to cod credentials from Netflix customers. As soon arsenic the idiosyncratic inputs those credentials, the attackers person them.'

Once login accusation is given, a 'Your relationship is temporarily suspended' alert appears connected the surface with different enactment to marque a payment.

'There's adjacent the enactment to wage via a Gift Card alternatively of a recognition card, which is conscionable arsenic good,' said Bitdefender.

'Netflix does connection the enactment to acquisition acquisition cards, but it's worthy noting that they're not disposable successful each region.'

If users bash autumn for the scam, the steadfast explained that their 'Netflix credentials and outgo accusation volition apt extremity up connected the acheronian web, wherever they volition beryllium sold successful bundles oregon arsenic a azygous item.'