SoylentNews is people
SoylentNews
Criminals are selling 'lifetime' Netflix, HBO, and cable sports streaming accounts for less than US$10 on sites hidden within Tor.
Premium sports accounts sell for about $10 while streaming TV can be bought for as low as 50 cents, far less than the $10 monthly subscription.
Comic fans can buy a stolen Marvel Unlimited lifetime account - meaning the victim is unlikely to shutter it - for 50 cents compared to the $10 monthly fee.
El Reg found the stolen accounts on the AlphaBay Marketplace accessible via the Tor network, on the back of the Intel report "The Hidden Data Economy" [pdf] which listed a few similar but more pricey offerings on another unnamed site.
Sellers are also flogging Premium Spotify, ComCast Xfinity, Uber, Apple, and Lynda training video accounts.
(Score: 2) by Wootery on Thursday December 03 2015, @01:59PM
If the account is 'active', it would be enough to show a short log of the last few log-ins (showing browser, location, date/time). That would alert the user their account had been compromised.
For an 'inactive' account, things aren't quite as simple. You could email them every month with a log-in log, but that might just annoy customers. Mandatory password changes would also work, but aren't popular.
I'm assuming that it's not practical to use a heuristic to detect when this sort of thing is happening, as I imagine it would look a lot like a Netflix account being shared between a couple (which Netflix don't mind).
Lastly, eBay seems to be ok with this trade [ebay.co.uk], at least if you say you're selling 'shared accounts' not stolen accounts... clearly against the service's terms & conditions, but I'm not sure if it's actually illegal.
(Score: 3, Touché) by Nerdfest on Thursday December 03 2015, @02:38PM
If your password is compromised, or may be, just change it. If your computer is compromised, that won't help but you probably have more serious problems than someone using your NetFlix account.
(Score: 2) by Wootery on Friday December 04 2015, @03:14PM
So you're just going to ignore the question of how someone might ever discover that their Netflix password has been compromised? How does that get us anywhere?
(Score: 0) by Anonymous Coward on Thursday December 03 2015, @03:25PM
Some sites do block accounts if they detect sharing or over sharing. P0rn sites are the most common ones to use that kind of tech.
In the password cracking and trading world, people advise that those using "acquired" accounts to go through the same proxy or VPN to keep the passes alive longer.
In that world, passes for everything from facebook to adult sites to netflix are usually traded or given away for free.
The low shelf life and the that fact that passes are usually given away for free is part of why they are being sold at such a low price. Also these passes on TOR seem like they are incidental information gained while stealing other info.