Netflix: A threat to your identity?
Netflix has become a popular addition to many Australian homes, but it could be helping cybercriminals to access your personal information and steal access to your account.
How could this be a problem for you, and why is it happening? Well, the ever-advancing world of cybercrime isn't helping. Vigilance is key in situations where your personal identity is concerned.
How popular is Netflix?
In terms of subscription television services, few names spring to mind faster than Netflix in Australia and most of the rest of the world. That's because so many people use the company for their entertainment purposes - and that keeps growing.
Roy Morgan Research pointed out in August 2015 that there were 1.89 million Australian users of Netflix at the time(1), while ZDNet reported only three months later that there were more than 2.5 million of the total 3.2 million that use streaming services in the country(2).
Statista reports that there were more than 70 million global users of Netflix(3), and that's a real concern when the system seems so easy to compromise.
Netflix was started in 1997, and has grown considerably over the past two years - now being used in more than 190 regions around the world(4). With such widespread popularity, it's no wonder that it has attracted the attention of hackers from everywhere as they attempt to provide cheaper, stolen accounts for users that want illegitimate access to the subscription service.
The threat to popular culture
While Netflix can be accessed on a television directly, the real risk from cyberattacks is to users who run the streaming service through their computers(4). An application has been noticed by Symantec Security Response that poses as Netflix, and when activated, downloads malware onto the system(4).
That malware is called Infostealer.Banload and is a Trojan that steals sensitive information(5) - in the case of Netflix, banking details(4). As a relatively new Trojan, only being discovered in October 20155, antivirus definitions have been created quickly to act against the infection.
If you're a user of Netflix, it might pay to be using a good antivirus program to protect yourself from the threat of Infostealer.Banload.
Malware is not the only way that attackers are striking, however, as phishing scams have been reported as well(4). The scams that have been detected were directing people to a fake Netflix website where login details, banking numbers and personal information can be entered(4). Once typed and logged, the information will be in the hands of the cybercriminals.
It might seem inconsequential that somebody has access to your name and date of birth, for example, but Veda reports that a user's birthday is one of the most common identifiers of sensitive accounts(6). When a hacker attempts to steal your identity, or open a new line of credit in your name, they will be able to provide your date of birth as proof that the account should be in your name(6). Of slightly more concern, however, is the fact that banking information can be stolen so easily, and once they do have access to your accounts, cybercriminals can use the funds as they please.
Netflix allows between one and four accounts on the same subscription, which means that an illegitimate user who has access to your account details via an illegal transaction could be using your service without your knowledge. The accessibility for hackers is greater than people may think.
What can be done to combat this threat?
The popularity of Netflix is overwhelming, and some illegal services offer access to accounts for only $0.25 - a significant discount on legitimate account fees(4).
Symantec recommends that if you're trying to download the Netflix application, only do so from the official Netflix website(4). That will mean the actual program you use will be the legitimate Netflix and can prevent any further damage being done to a system because of malware being continuously downloaded, and other malicious software infecting computers and devices.
Users are also being advised to steer well clear of services that are offering a discounted Netflix account, even if the website or advertisement appears legitimate(4). Logging your personal data and banking information on such websites will give cybercriminals direct access to accounts including emails and social media pages. The Infostealer.Banload is not the only threat to sensitive information this rise in Netflix attacks has presented to users.
If you suspect that sensitive information has been stolen from your Netflix account, then contact Identity Watch today. Its services can scour the digital black market for your information and then alert you so you are able to take the best course of action to prevent further damages. If you're wanting to keep Netflix private, then take control and make sure your details aren't being traded in shady digital communities.
1. Roy Morgan Research. Netflix reaches 1.89 million Australians. Accessed March 2016.
2. ZDNet. Netflix Australia reaches 2.5m users: ACMA. Accessed March 2016.
3. Statista. Statistics and facts about Netflix. Accessed March 2016.
4. Symantec. Netflix malware and phishing campaigns help build emerging black market. Accessed March 2016.
5. Symantec. Infostealer.Banload. Accessed March 2016.
6. Veda. Cybercrime and Fraud Report. Accessed March 2016.