Flickr Commons

The next time you access your Netflix account in Costa Rica, you may be surprised to find out that you are streaming a movie or a television series you’ve never heard of. Unless you share your Netflix login credentials with someone else, someone may have illegally purchased your password for as low as $0.25.

A recent article by Jacob Brogan of online news magazine Slate.com describes how the author realized someone was using his account to stream the family-friendly comedy Snow Buddies. Mr. Brogan cites a recent blog post by the respected Internet security firm Symantec, which describes a thriving black market of Netflix passwords being sold for less than dollar.

Symantec explains how black market operators may obtain your Netflix account information in Costa Rica:

One malware campaign involves malicious files posing as Netflix software on compromised computers’ desktops. The files are downloaders that, once executed, open the Netflix home page as a decoy and secretly download Infostealer.Banload. Banload steals banking information from the affected computer. The Trojan has primarily been used in Brazil.

The Netflix-disguised files aren’t dropped through drive-by downloads. Instead, the files are most likely downloaded by users who may have been tricked by fake advertisements or offers of free or cheaper access to Netflix.

Other cyber attacks that can be used to get your Netflix password include phishing schemes and keyloggers. Symantec further describes the black market action surrounding this practice:

Both malware and phishing campaigns help attackers gather the credentials needed to break into victims’ Netflix accounts. But the attackers may not just keep this access for themselves. There is an underground economy targeting users who wish to access Netflix for free or a reduced price. The products could even allow customers to open their own illegal store.

The most common offers are for existing Netflix accounts. These accounts either provide a month of viewing or give full access to the premium service. In most advertisements for these services, the seller asks the buyer not to change any information on the accounts, such as the password, as it may render them unusable. This is because a password change would alert the user who had their account stolen of the compromise.