Hackers are reportedly using a phishing campaign that tells s that their 2FA) authentication, which adds a second layer of protection in addition to the 's .
Stolen Netflix Data Could End Up on the Dark Web 6237m
Bitdefender recently identified a new phishing scam that is designed to convince s that their Netflix will be suspended, due to a failed payment. According to the security firm, hackers are using the scam to steal a 's Netflix name and , while also collecting their banking information.

Hackers guide s through the process of sharing their s and banking information
Photo Credit: Bitdefender
In order to target s with the Netflix suspended scam, hackers send s an SMS that tells s that there was an issue processing their payment, instructing them to sign in and "confirm" their details by tapping on a link. s who do so are taken to the phishing website.
In order to convince s that the phishing website is legitimate, the hackers prompt them to solve a simple math problem in order to prove they are not a robot. However, a glance at the URL of the phishing website would reveal that it is not hosted on Netflix's domain (netflix.com).
s are then prompted to enter their email address and on the phishing website, which appears to be identical to the official Netflix page. The hackers gain access to the 's credentials — granting them access to their , as the service does not offer any form of two-factor authentication.

Netflix data is being sold for as little as $2.99 on the dark web
Photo Credit: Bitdefender
The hackers then show s a page that says their is temporarily suspended as their primary payment cannot be billed. They are then asked to enter a credit or debit card number and expiry date, along the CVV number. The hackers also offer s an option to purchase gift cards, which are only available in some countries.
Once these details have been stolen, hackers sell the Netflix credentials and the credit card information on the dark web. The security firm also shared screenshots of some of these credentials available for purchase for as little as $2.99 (roughly Rs. 250), which can be purchased by buyers using cryptocurrencies.
In order to keep their information safe from hackers, s should only trust emails sent from the Netflix.com domain — these are delivered via email, not SMS — and it is easy to check the sender's information. If s receive a message, they can visit the Netflix site by typing the netflix.com URL in the address bar and checking their after logging in.