logo

Fake Disney+ activation page redirects to pornographic scam

ID: 6ad04893-c323-5a5c-9c09-4463a8a6aa58

STIX ID: report--6ad04893-c323-5a5c-9c09-4463a8a6aa58

Feed Name: Malwarebytes Blog

Threat Score
50/100

Date Published: 2024-10-01

Date Updated: 2026-04-28

...
...

Malwarebytes describes a scam campaign in which attackers create fake TV subscription activation pages (e.g., disneyplusbegins[.]com) that appear in Google search results and redirect visitors to a fraudulent Microsoft Defender scanner claiming child-abuse imagery; the goal is to panic victims into calling a phone number so scammers can perform tech-support fraud or steal money. The report outlines the SEO-based distribution, shows screenshots of the fake pages, and provides safety tips such as typing full URLs or closing the page rather than calling the displayed number.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.