Major Credential Stuffing Campaign Targets Streaming Services — 500K Accounts Compromised

A coordinated credential stuffing campaign has compromised over 500,000 accounts across three major streaming platforms using credential lists from recent data breaches. Compromised accounts are sold on dark web marketplaces for $2-5 each. The campaign uses residential proxy networks to evade rate limiting and bot detection. Affected platforms have initiated forced password resets and are implementing enhanced bot detection. Users are urged to enable MFA and avoid credential reuse.