Italy disrupts CINEMAGOAL piracy app that stole streaming auth codes
Italian authorities dismantled the CINEMAGOAL piracy app, which stole streaming authentication codes from platforms like Netflix and Disney+, causing an estimated €300 million in damages.
Italian law enforcement, in collaboration with Eurojust, disrupted the CINEMAGOAL piracy app, which bypassed streaming platform security by stealing authentication codes. The operation, dubbed “Tutto Chiaro”, involved the seizure of servers and identified over 70 resellers operating the app, which facilitated unauthorized access to streaming services. Authorities are now i…
Imagine you want to watch a movie on Netflix, but you don’t want to pay for a subscription. CINEMAGOAL was like a secret app that could trick Netflix into giving you access to movies for free. It did this by stealing the special codes that Netflix uses to protect its movies. These codes are like passwords that let you watch. The app used a clever system to get these codes every few minutes and share them with people who downloaded the app. The police found the app’s computer servers and stopped it from working. It’s like finding the secret key to a locked room and stopping people from entering. This is bad because it’s stealing money from Netflix and other streaming services. The police are now trying to find out who was using the app and how much money they made.
Analysis
The Italian operation, conducted by the Guardia di Finanza, targeted the CINEMAGOAL app, a stealthy piracy ecosystem that provided access to streaming services like Netflix, Disney+, and Spotify. Unlike traditional IPTV services, CINEMAGOAL operated by installing an app on users’ devices, allowing it to capture valid decryption codes from legitimate subscriptions every 3 minutes. According to the Guardia di Finanza, the app utilized virtual machines in Italy to obtain these codes, which were then redistributed to customers. This method circumvented standard security blocks implemented by the streaming platforms. The system also offered superior streaming quality, reducing the risk of user interception. "A highly advanced and previously unseen system that not only bypassed the security blocks implemented by the platforms, but also increased viewing quality, reducing the possibility that end users could be ‘intercepted’ by the control system," the Guardia di Finanza explained. The operation resulted in the seizure of CINEMAGOAL servers in France and Germany, containing the app’s source code and decoding functions. Two hundred financial police officers participated, and 200 financial police officers participated in the operation. The app’s business model involved selling annual subscriptions between €40 and €130 ($46-$150) through resellers, with payments made using cryptocurrency or to foreign bank accounts. The operation identified more than 70 resellers, and authorities have already issued penalties to the first 1,000 subscribers, ranging from €154 to €5,000 ($179-$5,800). The investigation is ongoing, with authorities analyzing seized material to identify all involved parties and estimate total profits. The operation also resulted in the dismantling of a related IPTV service known as “pezzotto”. The coordinated action, involving Eurojust, demonstrates the increasing international collaboration in combating online piracy.
Key points
- Italian authorities disrupted the CINEMAGOAL piracy app.
- The app stole streaming authentication codes from platforms like Netflix and Disney+.
- The app used virtual machines to obtain and redistribute valid subscription codes.
- The operation resulted in the seizure of servers and the identification of resellers.
- Authorities have issued penalties to early subscribers.
