Find Out How To Avoid Netflix Phishing Scams

Netflix users warned over sophisticated email scam used to steal personal information, again today.

Paul Walsh
METACERT
4 min readJan 29, 2019

--

Following this latest attack, Netflix users are being warned to show extreme caution after the discovery of a sophisticated email scam infiltrating inboxes across Australia.

The scam tells users their account has been suspended in an attempt to trick them into clicking a link which leads to a Netflix-branded phishing page used to steal personal information.

“We’ve temporarily suspeneded [sic] your account due to some issues in the automatic verification process,” the email reads.

“We will provide you with all the steps you need to unlock your account. Please follow these instructions after you click on the link below.”

Clicking the “UPDATE YOUR DETAILS” link redirects users to a fake Netflix login page, which has been painstakingly built to mirror the official login screen used by the streaming service.

The Netflix-branded phishing page allows cyber criminals to record the information entered by victims, which can be used for identity theft and fraud.

A spokesman from Netflix said while it takes security seriously, the popularity of the brand makes it a target for scammers.

“We take the security of our members’ accounts seriously and Netflix employs numerous proactive measures to detect fraudulent activity to keep the Netflix service and our members’ accounts secure,” the spokesman told nine.com.au.

Unfortunately, scams are common on the internet and target popular brands such as Netflix and other companies with large customer bases to lure users into giving out personal information.

Members who want to learn more about how to keep their personal information safe against phishing scams and other malicious activity can go to netflix.com/security or contact Customer Service directly. “

What doesn’t help

Phishing attacks are so sophisticated that even with training, the human eye can’t always detect signs of fraud, and employees are taking the bait.

“Check links before you open them” doesn’t deter people from opening links.

“Hover over a link to see where it goes” doesn’t work. Most phishing links have one or more shortened URLs and redirects.

“Look out for https:// so you know you’re on a safe site doesn’t help. Looking for SSL certificates is one sure way to get a false sense of security — over half of phishing scams start with https://.

Telling people to “avoid opening emails from unknown sources” doesn’t help either. Almost everyone knows they’re likely to open many emails from sources they don’t know — for many good reasons.

Corporate customers that use a combination of email and network-based security solutions say that phishing remains a massive problem for them.

This is why we built MetaCert

People love using MetaCert because they feel empowered to make better informed choices when they see the MetaCert shield turn from black to green, indicating that they are safe.

A cyber attack that goes undetected by traditional security tools can be now be caught by you or your employees.

MetaCert’s unique approach is the best way to condition your employees to immediately identify and avoid a new phishing attack before harm can be done.

dropbox.com should display a green shield, so you can immediately tell that this is potentially a new cyber attack.

Now that your employees are conditioned to look for the green shield, they will know to avoid websites with a black shield.

MetaCert Reporter makes it easy for employees to report suspicious links, so organizations can immediately investigate new cyber attacks.

Safety across all channels

No matter where your employees open or share links — whether it’s inside a cloud service, email, Skype, Facebook, Twitter, Slack or any other channel, they are fully protected by MetaCert with an easy-to-install software integration for your preferred Internet browser.

MetaCert has bundled both advanced identity & anti-fraud protection, and built-in training awareness into a single software solution. The software takes 60 seconds to install and 60 seconds to learn how to use it. And it has everything needed for companies with as few as 5, or as many as 50,000 employees.

Get Protected With MetaCert Now 😍

--

--

Paul Walsh
METACERT

MetaCert CEO. Passionate about Cybersecurity, Blockchain, Crypto, Snowboarding & Red Wine. Part of the AOL team that launched AIM. Co-founded 2 W3C Standards.