Fake Disney+ activation page redirects to pornographic scam
ID: 6ad04893-c323-5a5c-9c09-4463a8a6aa58
STIX ID: report--6ad04893-c323-5a5c-9c09-4463a8a6aa58
Feed Name: Malwarebytes Blog
Malwarebytes describes a scam campaign in which attackers create fake TV subscription activation pages (e.g., disneyplusbegins[.]com) that appear in Google search results and redirect visitors to a fraudulent Microsoft Defender scanner claiming child-abuse imagery; the goal is to panic victims into calling a phone number so scammers can perform tech-support fraud or steal money. The report outlines the SEO-based distribution, shows screenshots of the fake pages, and provides safety tips such as typing full URLs or closing the page rather than calling the displayed number.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
