Cyber Security News

Italian Authorities Dismantled CINEMAGOAL App that Enables Access to Various Streaming Platforms

Italian law enforcement has dismantled a large-scale audiovisual piracy network centered around a sophisticated application called CINEMAGOAL, which enabled users to access premium streaming services without authorization.

The operation, codenamed “All Clear”, was led by the Ravenna Financial Police under the direction of the Bologna Public Prosecutor’s Office, with coordinated actions across Italy, France, and Germany.

Italian Authorities Dismantled CINEMAGOAL

The investigation began through social media monitoring and revealed an innovative piracy model that differs significantly from traditional IPTV-based systems.

The CINEMAGOAL application allowed users to access paid content from platforms such as Sky, DAZN, Netflix, Disney+, and Spotify by connecting to servers located abroad.

At the core of the operation was a distributed infrastructure of virtual machines deployed across multiple regions.

These systems operated continuously, capturing legitimate subscription authentication codes every three minutes.

The captured credentials linked to accounts registered under fictitious identities were then retransmitted to end users in near real-time as decrypted streams.

This approach effectively bypassed platform-level DRM protections while maintaining high-quality streaming.

Notably, the system also anonymized users by removing the need for direct IP association, making detection by platform security mechanisms significantly more difficult.

Authorities identified over 70 individuals responsible for distributing access to the illicit service across Italy.

These distributors marketed the application as a secure, undetectable solution, charging annual subscription fees ranging from €40 to €130, depending on service packages.

Payments were typically conducted using untraceable methods, including cryptocurrency transactions and transfers to foreign or fictitious bank accounts.

A portion of the proceeds was funneled back to the core operators managing the infrastructure.

Guardia di Finanza said over 200 officers executed 100+ warrants, while proceeds were routed to core operators.

In coordination with Eurojust, authorities also seized servers located abroad that contained critical data used to decrypt protected content, as well as the source code for the CINEMAGOAL application.

Investigators also confirmed the parallel use of traditional “pezzotto” IPTV systems, indicating a hybrid piracy ecosystem combining legacy and advanced techniques.

Preliminary estimates suggest that the piracy network caused approximately €300 million in damages to affected streaming platforms, resulting in lost subscription revenue.

Authorities have already identified the first 1,000 users, who now face administrative fines ranging from €154 to €5,000.

Further forensic analysis of seized devices and infrastructure is ongoing. It is expected to identify additional participants, including end users and financial beneficiaries.

Charges under investigation include audiovisual piracy, unauthorized access to computer systems, and computer fraud.

The case remains under preliminary investigation, and any criminal liability will be determined following judicial proceedings in accordance with due process.

Follow us on Google NewsLinkedIn, and X to Get More Instant Updates.

Abinaya

Abi is a Security Editor and fellow reporter with Cyber Security News. She is covering various cyber security incidents happening in the Cyber Space.

Recent Posts

Hackers Target AI Infrastructure With RCE, Prompt Injection and API Key Theft

Hackers are actively probing AI systems, turning exposed gateways and agent tools into routes for…

4 hours ago

Hackers Make Phishing Pages Change Their Code Every Time Someone Opens Them

Hackers are making some phishing pages harder to track by changing the code delivered to…

4 hours ago

Iran-Linked Hackers Reportedly Knock UK Power Plant Offline for Four Days

A cyber incident reportedly forced a British power plant to halt operations for about four…

5 hours ago

Russian Hackers Use New HOOKEDGE Malware to Spy on European Defense and Diplomatic Targets

Russian hackers have used a new backdoor called HOOKEDGE to target defense manufacturers, government bodies,…

5 hours ago

Ransomware Gang Claims AI Can Analyze 700GB of Stolen Data Every Hour

TITAN ransomware is pairing file encryption with an ambitious claim: artificial intelligence that can sort…

5 hours ago

Hackers Compromise Hundreds of WordPress Sites to Deploy Amatera Stealer via ClickFix

A fake student resume is being used to place a remote-access tool on researchers’ Windows…

7 hours ago