YouTube Scam Lures Eager 'Doctor Who' Fans to Reveal Personal Data

“Doctor Who” may be one of the most popular science fiction series of all time, but anyone interested in streaming the new season should check for factual accuracy before creating a “free” online account.

Researchers discovered a litany of YouTube channels that supposedly offer access to season 11 of the long-running British TV show, but may actually be duping people into handing over personal information. According to Malwarebytes, the YouTube scams include links that direct viewers to offers featuring “Doctor Who” imagery, encouraging them to sign up to watch the show.

YouTube Scam Could Be After Personal Data

Though the pop-up box suggests that watching the latest “Doctor Who” episodes comes at no cost, other areas of the same sites include prompts to “try this service for free” — which could mean users will be billed later or denied access unless they opt for a premium version of a streaming service.

The researchers noted that the operators of the YouTube scam often used outdated photos from previous seasons of the show, which should be a giveaway that their offers aren’t legitimate. Besides gathering names, email addresses and other personal data, such scams can lead unsuspecting users to illegal or pirated versions of copyrighted content, including TV series like “Doctor Who.”

Unlike a more traditional business, these scams sometimes ask for credit card information up front, even if they fail to offer substantial details about the services they purport to provide.

The Power of Penetration Testing

Given that employees might be looking for “Doctor Who” streaming options on their lunch hour, companies must be vigilant when this type of scam makes news headlines. While most phishing scams use email as an initial lure, they often lead to similarly dubious websites that ask people to enter data.

IBM security experts recommend conducting penetration testing to determine which social engineering scenarios pose the greatest risk to the organization. Simulated phishing engagements can also help security leaders enforce secure behaviors, such as making sure a website is what it claims to be and doing some extra research online before clicking through.

Source: Malwarebytes

Shane Schick

Writer & Editor

The major hardware flaw in Apple M-series chips

3 min read - The “need for speed” is having a negative impact on many Mac users right now.The Apple M-series chips, which are designed to deliver more consistent and faster performance than the Intel processors used in the past, have a vulnerability that can expose cryptographic keys, leading an attacker to reveal encrypted data. This critical security flaw, known as GoFetch, exploits a vulnerability found in the M-chips data memory-dependent prefetcher (DMP).DMP’s benefits and vulnerabilitiesDMP predicts memory addresses that the code is most…

NIST’s role in the global tech race against AI

4 min read - Last year, the United States Secretary of Commerce announced that the National Institute of Standards and Technology (NIST) has been put in charge of launching a new public working group on artificial intelligence (AI) that will build on the success of the NIST AI Risk Management Framework to address this rapidly advancing technology.However, recent budget cuts at NIST, along with a lack of strategy implementation, have called into question the agency’s ability to lead this critical effort. Ultimately, the success…

Researchers develop malicious AI ‘worm’ targeting generative AI systems

2 min read - Researchers have created a new, never-seen-before kind of malware they call the "Morris II" worm, which uses popular AI services to spread itself, infect new systems and steal data. The name references the original Morris computer worm that wreaked havoc on the internet in 1988.The worm demonstrates the potential dangers of AI security threats and creates a new urgency around securing AI models.New worm utilizes adversarial self-replicating promptThe researchers from Cornell Tech, the Israel Institute of Technology and Intuit, used what’s…

Security Intelligence

{{title}}

{{title}}

{{title}}

Topics

YouTube Scam Could Be After Personal Data

The Power of Penetration Testing

More from

The major hardware flaw in Apple M-series chips

NIST’s role in the global tech race against AI

Researchers develop malicious AI ‘worm’ targeting generative AI systems

Topic updates