Media Service Impersonation
Adversaries impersonate media platforms—including streaming services, TV channels, and radio stations—to harvest credentials or payment details. Lures include fake alerts, giveaways, and subscription notices.
Mapped to
MITRE ATT&CK®
Category default. This theme has no curated mapping of its own, so it shows the defaults for Service Impersonations themes.
Sub-themes
TH0001.1
Streaming Service Impersonation
Adversaries mimic platforms like Netflix or Spotify to deliver fake alerts or offers, luring victims to credential-harvesting sites.
TH0001.2
TV Broadcaster Impersonation
Adversaries impersonate TV channels using fake prize draws, surveys, or subscription issues to extract user credentials or payment details.
TH0001.3
Radio Broadcaster Impersonation
Threat actors pose as radio stations promoting fake contests or listener rewards, directing victims to phishing portals.
TH0001.4
News Outlet Impersonation
Threat actors impersonate reputable newspapers or news outlets by mimicking their branding, email templates, or domains. These phishing messages often appear as breaking news alerts, subscription confirmations, or article shares designed to lure recipients into clicking malicious links. The use of trusted media names increases credibility and engagement, often directing victims to fake login portals, malware downloads, or scam websites.