Italian law enforcement agencies have dismantled a sophisticated piracy operation centered around the CINEMAGOAL application, which enabled unauthorized access to premium streaming platforms including Netflix, Sky, DAZN, Disney+, and Spotify.
The operation, codenamed “All Clear,” was led by the Financial Police in Ravenna under the direction of the Bologna Public Prosecutor’s Office. Authorities conducted over 100 coordinated searches and seizures across Italy, with additional actions supported through international cooperation in France and Germany via Eurojust.
Investigators uncovered a previously unseen technical infrastructure designed to bypass digital rights management (DRM) protections. At the core of the scheme was the CINEMAGOAL application, which users installed on their devices to access pirated content.
Unlike traditional IPTV piracy systems, this platform leveraged a network of virtual machines distributed across multiple locations.
These virtual machines operated continuously, capturing legitimate subscription credentials every three minutes from accounts registered under fictitious identities. The system then decrypted and retransmitted the content in near real-time, delivering an unencrypted stream directly to users.
Authorities highlighted that the architecture significantly reduced detection risks. The application did not rely on fixed IP addresses, making it difficult for streaming platforms to trace or block unauthorized access. This feature was actively marketed by distributors as a key advantage, allowing users to evade platform-level monitoring systems.
More than 70 individuals were identified as distributors of the illegal service. They offered subscription packages ranging from €40 to €130 annually, with payments primarily conducted through untraceable methods such as cryptocurrencies or foreign accounts. A portion of the profits was funnelled back to the operators behind the infrastructure.
Law enforcement also seized critical components of the operation, including foreign-based servers, decoding systems, and the application’s source code. These assets are expected to provide further insights into the network and help identify additional suspects, including end users.
In parallel, investigators confirmed that traditional IPTV piracy methods, commonly referred to as “pezzotto”, were also used alongside the CINEMAGOAL platform to distribute unauthorized content.
The scale of the operation is significant. Authorities estimate that the scheme generated illicit profits amounting to millions of euros, while causing approximately €300 million in damages to affected media companies due to lost subscription revenue.
As part of the enforcement actions, fines ranging from €154 to €5,000 will be issued to the first 1,000 identified users. Further penalties may follow as the investigation continues.
Officials emphasized that the case remains under preliminary investigation, and all individuals involved are presumed innocent until proven guilty in court.
Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…