Tuesday, November 26, 2024
HomeMobile AttacksWhatsApp scam - Advertising Netflix Subscription free for a year

WhatsApp scam – Advertising Netflix Subscription free for a year

Published on

[jpshare]These days it winds up plainly normal as we see a huge increase with Scam message in Whatsapp, here is another WhatsApp scam – Advertising Netflix Subscription free for a year.

For this new Whatsapp trick, fraudsters are utilizing this outstanding TV mark as the trap to spread the attack.

Initial Scam Message

If you have received the message even from a reliable contact don’t click or don’t share the link.

- Advertisement - SIEM as a Service

The message has all the earmarks of being from Netflix, however, have close look it demonstrates a shortened URL which takes clients to different sites not identified as Netflix.

Also, the image appears in different languages Spanish, English, and Portuguese.

WhatsApp scam - Advertising Netflix Subscription
Spanish
WhatsApp scam - Advertising Netflix Subscription
English
WhatsApp scam - Advertising Netflix Subscription
Portuguese

Multilingual Fake page

User’s on clicking the link will take to the page that not belongs to Netflix as like the malicious URL the multilingual.

Another inquisitive truth is that the page has the ability to recognize the language of the device and can change its language consequently.

This malicious page guarantees that if the request was sent to 10 individuals then Netflix service will be accessible free for a year.

The victim is redirected to pages that falsely claim that they are on the “last stride” to accomplish enactment when is truly happening that they are taking information from clients according to ESET blog post.

Mitigations

  • If you already shared with anyone, ESET advising users to contact them and let them know about the incident.
  • Did you provide your telephone number? Check wit your service provider that you are not added to any premium service.
  • If any application downloaded from the URL, uninstall them immediately.

Also Read

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Multiple Flaws With Android & Google Pixel Devices Let Attackers Elevate Privileges

Several high-severity vulnerabilities have been identified in Android and Google Pixel devices, exposing millions...

Threat Actors Exploit Google Docs And Weebly Services For Malware Attacks

Phishing attackers used Google Docs to deliver malicious links, bypassing security measures and redirecting...

Python NodeStealer: Targeting Facebook Business Accounts to Harvest Login Credentials

The Python-based NodeStealer, a sophisticated info-stealer, has evolved to target new information and employ...

XSS Vulnerability in Bing.com Let Attackers Send Crafted Malicious Requests

A significant XSS vulnerability was recently uncovered in Microsoft’s Bing.com, potentially allowing attackers to...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

Ghost Tap Attack, Hackers Stolen Credit Card Linked To Google Pay Or Apple Pay

Threat actors are exploiting a new cash-out tactic called "Ghost Tap" to siphon funds...

HookBot Malware Use Overlay Attacks Impersonate As Popular Brands To Steal Data

The HookBot malware family employs overlay attacks to trick users into revealing sensitive information...

Hardcoded Creds in Popular Apps Put Millions of Android and iOS Users at Risk

Recent analysis has revealed a concerning trend in mobile app security: Many popular apps...