October 12, 2018 By Shane Schick 2 min read

“Doctor Who” may be one of the most popular science fiction series of all time, but anyone interested in streaming the new season should check for factual accuracy before creating a “free” online account.

Researchers discovered a litany of YouTube channels that supposedly offer access to season 11 of the long-running British TV show, but may actually be duping people into handing over personal information. According to Malwarebytes, the YouTube scams include links that direct viewers to offers featuring “Doctor Who” imagery, encouraging them to sign up to watch the show.

YouTube Scam Could Be After Personal Data

Though the pop-up box suggests that watching the latest “Doctor Who” episodes comes at no cost, other areas of the same sites include prompts to “try this service for free” — which could mean users will be billed later or denied access unless they opt for a premium version of a streaming service.

The researchers noted that the operators of the YouTube scam often used outdated photos from previous seasons of the show, which should be a giveaway that their offers aren’t legitimate. Besides gathering names, email addresses and other personal data, such scams can lead unsuspecting users to illegal or pirated versions of copyrighted content, including TV series like “Doctor Who.”

Unlike a more traditional business, these scams sometimes ask for credit card information up front, even if they fail to offer substantial details about the services they purport to provide.

The Power of Penetration Testing

Given that employees might be looking for “Doctor Who” streaming options on their lunch hour, companies must be vigilant when this type of scam makes news headlines. While most phishing scams use email as an initial lure, they often lead to similarly dubious websites that ask people to enter data.

IBM security experts recommend conducting penetration testing to determine which social engineering scenarios pose the greatest risk to the organization. Simulated phishing engagements can also help security leaders enforce secure behaviors, such as making sure a website is what it claims to be and doing some extra research online before clicking through.

Source: Malwarebytes

More from

How will the Merck settlement affect the insurance industry?

3 min read - A major shift in how cyber insurance works started with an attack on the pharmaceutical giant Merck. Or did it start somewhere else?In June 2017, the NotPetya incident hit some 40,000 Merck computers, destroying data and forcing a months-long recovery process. The attack affected thousands of multinational companies, including Mondelēz and Maersk. In total, the malware caused roughly $10 billion in damage.NotPetya malware exploited two Windows vulnerabilities: EternalBlue, a digital skeleton key leaked from the NSA, and Mimikatz, an exploit…

3 Strategies to overcome data security challenges in 2024

3 min read - There are over 17 billion internet-connected devices in the world — and experts expect that number will surge to almost 30 billion by 2030.This rapidly growing digital ecosystem makes it increasingly challenging to protect people’s privacy. Attackers only need to be right once to seize databases of personally identifiable information (PII), including payment card information, addresses, phone numbers and Social Security numbers.In addition to the ever-present cybersecurity threats, data security teams must consider the growing list of data compliance laws…

ICS CERT predictions for 2024: What you need to know

4 min read - As we work through the first quarter of 2024, various sectors are continuously adapting to increasingly complex cybersecurity threats. Sectors like healthcare, finance, energy and transportation are all regularly widening their digital infrastructure, resulting in larger attack surfaces and greater risk exposure.Kaspersky just released their ICS CERT Predictions for this year, outlining the key cybersecurity challenges industrial enterprises will face in the year ahead. The forecasts emphasize the persistent nature of ransomware threats, the increasing prevalence of cosmopolitical hacktivism, insights…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today