Netflix phishing attack is not chill – TheINQUIRER

A PHISHING AWARENESS OUTFIT has discovered a phishing attack that targets both the business and personal accounts of Netflix users.

PhishMe, the angling outfit, reports that the phishing attack looks like a Netflix account renewal email and smells like a Netflix account renewal email. It adds that the option to update bags the phishing bad guys debit or credit card details as well as the usual personal information.

The card swipe is a big one and unlike regular payment taking forms it wants your mother’s maiden name. This may be a red flag for some, but with people we cannot be sure.

Oh, and this

Heads Up: This Netflix Phish Targets Business Email, Not Just Home Accounts. Learn what our PDC analysts observed: https://t.co/yUKuer1iEd pic.twitter.com/L7m7n5seoN

— PhishMe (@PhishMe) October 10, 2017

“Typically, people at work try to handle a minor personal inconvenience as quickly as possible. So, the Netflix phish works to trick those busy people into giving up login information. The victim is already rushed; they may not have the time to keep track of dozens of passwords” added PhishMe.

“So now the attacker hopes that you reuse the same password for your personal email account or, if the attacker is very lucky, for your work email account. In either case, they can now reset passwords for various other online services—banking, healthcare, social media—to pivot and carry their attack forward.”

PhishMe said that firms could make it harder for phishing bastards by enforcing two-factor authentication at the desk level. µ

<!–