July 28, 2020 By Steve Zurier
Hackers use two stolen domains to steal credentials from Netflix users and then send them to the real Netflix site.
Researchers recently discovered a Netflix phishing campaign where attackers fashioned two legitimate domains to appear like the actual Netflix site: The hackers sent victims a billing failure email with a link that would send the unknowing victim to the two spoofed sites in order to steal their credentials, and then to the legitimate Netflix site.
Chetan Anand, co-founder and architect at Armoroblox, says the attack hit users at a dozen or more companies, as the attackers were preying on more people working from home during the COVID-19 pandemic.