If you have received an email from Disney+ customer service, be particularly vigilant. Indeed, a new phishing campaign is currently targeting users of the streaming platform. This fake email is quite well done and can easily trap the least savvy subscribers. Best of all, scammers are also targeting other services. Explanations.
This is the daily fate of streaming service subscribers: phishing attempts.
If you are a customer of Netflix, Amazon Prime Video, Disney+ and others, you have inevitably received at least once a fake email supposedly from your platform’s after-sales service. Generally, the presentation is crude and with a little training, the scam is easy to spot.
But unfortunately for us, the scammers are diligent and have been offering for some time increasingly credible scams. As proof, one of the members of the editorial staff (the author of these lines in this case) recently received a phishing email stamped Disney+.
We would like to warn you about this new phishing attempt, due to the quality of the counterfeit. It must be recognized, the job was well done and an unwary user could easily fall into the trap. We find the color codes (the dark blue characteristic of the platform), the high definition logo, the charter and the presentation of the emails sent by Disney+.
Beware of this new Disney+ phishing campaign
At first glance, it is therefore impossible to say that this is a scam. Especially since once is not customary, no spelling errors to report. On the other hand, the pretext remains classic: you are informed of difficulties in processing your payment and to continue to benefit from the service, it is essential to update your payment information before 10/31/2023 in this case.
“Otherwise, closing costs amounting to €49.99 will be payable to you. billed,” threaten the hackers in the fake email. Below the text there is obviously a “Validate payment information” button. By clicking on it, you will be redirected to a reproduction of Disney+. Of course, all the information provided on this page (passwords, usernames, bank details) will end up in the hands of hackers.
However, a clue can put you on the trail of the scam: the URL and the domain name used, namely n[email protected]r. After doing some research, it turns out that Magazine Luiza is a very legitimate Brazilian e-commerce site. In other words, everything indicates a spoofed domain name.
If that wasn’t enough, please note that we received other phishing attempts from the same address. This time, it was a fake email from ANTAI, the National Agency for the Automated Processing of Offenses (editor’s note: the platform which is used in particular to pay fines online). Here again, the work is extremely well done: no spelling errors, the logos of the French Republic and ANTAI, everything is there. As you will have understood, if you receive an email from this address, be extra vigilant.
