“The man was allegedly behind the website WickedGen.com, which boasted of having 120,000 users and sold Netflix, Spotify and Hulu logins stolen from almost one million accounts,” the CNET reported on Wednesday.
Evan Leslie McMahon, a 21-year-old IT worker, reportedly made money from selling stolen subscription details from streaming services.
He was charged with multiple cybercrime offenses and appeared in a court here. The website was shut down later.
“The account details were obtained through credential stuffing, which sees a list of previously stolen or leaked usernames, email addresses and corresponding passwords re-used and sold for unauthorised access,” the Australian Federal Police was quoted as saying in a statement.
While account sharing is common (roughly one-third of streaming users say they’d quit a service like Netflix if it tried to stop password sharing), account stealing is a different matter, the report added.