If you're planning a weekend on Netflix while you relax with your loved ones, keep in mind that the brand is being used by scammers to frame unsuspecting users! Phishers have targeted this popular brand for a year, trying to trick users into delivering their credentials and payment information, but this week scammers have increased their game. Users have reported messages that come from the popular video streaming service that claims that the recipient's payment has been declined. He then urges them to update their payment details, which transfer them to a very credible page where the victim is encouraged to present the details of his credit card. Anyone who does this is then transferred to a legitimate Netflix page, while the criminals disappear into the night with the user's financial information. Of course, for individuals, this could be very upsetting. But surely this is just a consumer problem? Well, in this case, yes, but phishing poses a threat to the company. Eyal Benishti, CEO and founder of IRONSCALES, explains: "If a phishing email, like this one, happens to fall into an employee's inbox while at work, this could quickly become a problem for the entire organization." While the recent Netflix scam leads to a phishing site, phishing attacks are on the rise and many are used to spreading malware and organizations for hackers. Eyal continues: “As in any case of phishing, vigilance is the key. Never hand over any official information, and if you're even a little suspicious, contact the 'Sender' (in this case Netflix), or if at work, your IT security team. Scams like this are often spotted relatively quickly, so keeping an eye on social media, news sites, and even a quick Google search could prevent you and your organization from becoming the latest victim. Offering her advice for thwarting phishing attacks, Eyal added: “It is imperative to help users identify well-designed imitation techniques in order to avoid a potential cybersecurity incident, which could be crippling for an organization. This means using mailbox-level detection that tracks user behavior analysis to create an image of what is considered normal behavior so that anomalies in communications are easily detected and automatically flagged as suspicious, providing in parallel an augmented email experience (InMail alerts) and mechanism (button report) to help employees better spot and easily report something not good in a message, ultimately helps protect the business.
