STREAMING

Cybercriminals are hacking audio streaming accounts to sell illegal access and fraudulently promote artists

Audio streaming platforms, such as Spotify and others, have become frequent targets for cybercriminals looking for ways to profit illicitly from access to these accounts. Hackers have been hacking user profiles, not only to sell access illegally, but also to fraudulently promote artists, simulating continuous playback of songs.

Techniques used by cybercriminals to hack streaming services...The hacking of streaming accounts can occur in several ways. One of the most common is phishing, where criminals send messages with malicious links, inducing the user to click and reveal private data. These emails or messages can request personal information, such as passwords and bank details, under the pretext of deactivating the account or promising benefits.

Another method includes the use of leaked data, in which attackers test combinations of emails and passwords until they gain access to an account. Checking whether an email has been compromised on sites like “HaveIBeenPwnd” is one way to protect yourself.

Unofficial apps that promise free premium features are also used to steal login credentials. In addition, malware infections, especially keyloggers that monitor keystrokes, are another resource used to capture victims’ login information.

How to protect yourself?

-To protect streaming accounts, experts recommend using strong and unique passwords, with a combination of capital letters, numbers and special characters.

-The use of password managers is also suggested to generate and store these credentials securely.

-In addition, downloading apps only from official sources and avoiding very advantageous promotions are important security practices.

-Keeping systems updated and using security software on all devices are also effective preventive measures.

Warnings from streaming platforms...Streaming services, such as Spotify, warn that they never ask for banking information or passwords via email, and advise users to recognize fraudulent messages. Sharing your account with third parties can also be risky, even if they are trustworthy, as not everyone has enough knowledge to keep your account secure. Camilo Gutiérrez Amaya, Head of Research at ESET Latin America, reinforces: “It is always better to opt for family or shared subscriptions, but avoid directly sharing account credentials.”

mundophone