July 20, 2020
When it comes to disguising malicious files under the popular streaming platform names and their content, cybercriminals most often use Netflix and The Mandalorian (a Disney + original) as a lure. Between January 2019 and April 8, 2020, more than 5,000 users of Kaspersky They were exposed to various threats while trying to access Netflix through unofficial files that used their name.
–
With the increasing popularity of streamingThese platforms, and their original programs, are increasingly being exploited by cyber criminals as a way to launch various attacks, ranging from those of phishing, designed to collect account credentials and financial information, to use the names of these platforms and their programs to attract users to download different threats, including adware and malware.
In total, more than 22,000 infection attempts were detected using Netflix as a decoy. When it comes to original shows on streaming platforms, The Mandalorian It was the program most exploited by malicious users, with a total of 1,614 users exposed in this way and 5,855 registered infection attempts.
The investigation
With this in mind, Kaspersky researchers examined the cyber threat landscape of five major platforms of streaming (Hulu, Disney +, Netflix, Apple TV Plus, Amazon Prime Video) from January 2019 to April 8, 2020. They found that a total of 5,577 users were exposed to various threats while trying to access these platforms through Unofficial media through archives that used the names of these platforms as a lure, and most used Netflix as a target. In total, there were 23,936 attempts to infect these users with various threats.
–
Kaspersky researchers also examined cyber threats related to original content on these platforms. By examining 25 original programs on the five platforms previously mentioned, they discovered …
The five most used programs by cybercriminals as a decoy:
- The Mandalorian (Disney +)
- Stranger Things (Netflix)
- The Witcher (Netflix)
- Sex Education (Netflix)
- Orange is the New Black (Netflix).
A total of 4,502 Kaspersky users were exposed to various threats through malicious files that contained the name of one of these five programs as a decoy, with a total of 18,947 registered infection attempts. Most came from files that contained the name as decoy The Mandalorian, a popular original Disney + program, with 1,614 users and a total of 5,855 infection attempts.
For both platforms and original programs, the most frequent threats users encounter are also the most dangerous: Trojans diverse. These types of malicious files allow cybercriminals to do everything from deleting and blocking data to disrupting the operation of the computer. Some of the distributed Trojans were spy Trojans, particularly dangerous malicious files that track user actions on the infected device. With spyware, users are likely to have their personal files and photos collected, as well as login and password information for their financial accounts.
Streaming Wars
“The so-called ‘streaming wars’ have just started, and as the popularity of these platforms grows, so will the attention they receive from malicious users. This is especially true as many of the platforms are experiencing unprecedented growth as a result of home stay requests and several companies have adopted the work-from-home approach for their staff. Although users may be tempted to search for alternative methods to view their favorite content online instead of paying for another subscription, to stay safe the best option is always to access the platforms and their programs through official sources ”, says Anton Ivanov, malware analyst at Kaspersky.
To stay safe from various threats on platforms streaming or its original content, Kaspersky experts recommend:
- Whenever possible, only access streaming platforms through your own subscription on the official website or app from official locations.
- Do not download unofficial versions or modifications of the applications of these platforms.
- Use different and strong passwords for each of your accounts.
Learn more about the threat landscape across platforms streaming in Securelist.
[+] Videos de nuestro canal de YouTube
Related
–
