CyberCriminals Sold Tools in Dark Web to Hack Disney+ Accounts Before it Was Launched

Disney+ a subscription-based on-demand streaming service powered by Walt Disney launched on November 12, 2019. On the first day, the number of people complained about the technical issues.

Many users complain that they were unable to stream videos, other technical issues. Some users complain they are losing their account access.

Accounts for Sale on Dark Web

Initially, the service was launched only to the users in the United States, Canada, and the Netherlands. With the service, users can watch movies, short films and other TV shows.

According to ZDNet investigation, the Disney+ accounts are offered to sale on dark web starts from $3 to $11 and also in some forums the credentials offered for free. ZDNet is also able to confirm that the credentials are a valid one.

The account credentials linked with all other services that the company provides, it means if one service hacked, attackers can access all the services associated with the user account.

Tools Sold in Dark Web

Motherboard found that Disney+ account hacking tools are circulated on the dark web for months, “hackers use to give away tools so-called “configs”—files that control special software for breaking into accounts en masse—designed to crack Disney+.”

The attackers use tools to check for the combinations of usernames and passwords that users shared across multiple services and to gain access over those services.

In one of the hacking forum, it was found that the threat actor created a threat named “DISNEY+ CONFIG,” and shared before two months ago.

Disney said in an email, “Disney takes the privacy and security of our users’ data very seriously and there is no indication of a security breach on Disney+.”

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity and hacking news updates.

Also Read

Cybersecurity Company Check Point’s ZoneAlarm Forum Hacked – Attackers Exploited Patched vBulletin 0-Day Flaw

Bugcrowd Paid $500,000 Bug Bounty Reward to Ethical Hackers Within a Week