Italy disrupts CINEMAGOAL piracy app that stole streaming auth codes
Recorded: May 23, 2026, 2:58 p.m.
| Original | Summarized |
Italy disrupts CINEMAGOAL piracy app that stole streaming auth codes News Featured Microsoft warns of new Defender zero-days exploited in attacks GitHub confirms breach of 3,800 repos via malicious VSCode extension Hackers bypass SonicWall VPN MFA due to incomplete patching Flipper One project needs community help to build open Linux platform Italy disrupts CINEMAGOAL piracy app that stole streaming auth codes Skip the small talk—learn new languages in this Babbel app deal Netherlands seizes 800 servers of hosting firm enabling cyberattacks Former US execs plead guilty to aiding tech support scammers Tutorials Latest How to access the Dark Web using the Tor Browser How to enable Kernel-mode Hardware-enforced Stack Protection in Windows 11 How to use the Windows Registry Editor How to backup and restore the Windows Registry How to start Windows in Safe Mode How to remove a Trojan, Virus, Worm, or other Malware How to show hidden files in Windows 7 How to see hidden files in Windows Webinars Latest Qualys BrowserCheck STOPDecrypter AuroraDecrypter FilesLockerDecrypter AdwCleaner ComboFix RKill Junkware Removal Tool Deals Categories eLearning IT Certification Courses Gear + Gadgets Security VPNs Popular Best VPNs How to change IP address Access the dark web safely Best VPN for YouTube Forums Virus Removal Guides HomeNewsLegalItaly disrupts CINEMAGOAL piracy app that stole streaming auth codes Italy disrupts CINEMAGOAL piracy app that stole streaming auth codes By Bill Toulas May 23, 2026 Italian authorities have dismantled a piracy ecosystem centered around the CINEMAGOAL app that provided access to various streaming platforms, including Netflix, Disney+, and Spotify. The Validation Gap: Automated Pentesting Answers One Question. You Need Six. Automated pentesting tools deliver real value, but they were built to answer one question: can an attacker move through the network? They were not built to test whether your controls block threats, your detection rules fire, or your cloud configs hold.This guide covers the 6 surfaces you actually need to validate. Related Articles: CINEMAGOAL Bill Toulas Previous Article Post a Comment Community Rules You need to login in order to post a comment Not a member yet? Register Now You may also like: Upcoming Webinar Popular Stories GitHub confirms breach of 3,800 repos via malicious VSCode extension Microsoft warns of new Defender zero-days exploited in attacks Exploit released for new PinTheft Arch Linux root escalation flaw Sponsor Posts Managing Shadow AI: 5 Steps to Secure Employee AI Use Without Killing Productivity Protect Your Business from Ecommerce Fraud Patch management isn't enough. See why privilege is defining security risk today. Overdue a password health-check? Audit your Active Directory for free 33% Rise in Healthcare Credential Theft in 2025: What you need to know Upcoming Webinar Follow us: Main Sections News Community Forums Useful Resources Welcome Guide Company About BleepingComputer Terms of Use - Privacy Policy - Ethics Statement - Affiliate Disclosure Copyright @ 2003 - 2026 Bleeping Computer® LLC - All Rights Reserved Login Username Password Remember Me Sign in anonymously Sign in with Twitter Not a member yet? Register Now Help us understand the problem. What is going on with this comment? Spam Abusive or Harmful Inappropriate content Strong language Other Read our posting guidelinese to learn what content is prohibited. Submitting... |
Italian authorities successfully dismantled a piracy ecosystem centered around the CINEMAGOAL application, which was utilized to obtain access to various streaming platforms including Netflix, Disney+, and Spotify by stealing legitimate streaming authentication codes. This operation, known as “Tutto Chiaro,” involved extensive law enforcement action, including 100 searches across the country, to identify perpetrators and ascertain the scale of illegal profits generated through audiovisual piracy, unauthorized computer access, and computer fraud. The CINEMAGOAL system operated stealthily, distinguishing itself from traditional IPTV services by using a mobile application installed directly on user devices, rather than overtly marketing operations. Technically, the system functioned by utilizing virtual machines located in Italy to capture valid authentication and decryption codes from legitimate subscriptions every three minutes, which were then redistributed to customers. This process allowed CINEMAGOAL to bypass security blocks implemented by the streaming platforms while simultaneously offering superior streaming quality and masking the actual IP addresses of the end users, thereby reducing the possibility of being intercepted by control systems. The scope of the illegal enterprise was significant, involving more than 70 resellers who marketed annual subscriptions ranging from forty euros to one hundred thirty euros. Financial transactions were conducted using cryptocurrency or through bank accounts registered under false identities. Authorities estimate that the CINEMAGOAL operation caused damages amounting to approximately three hundred million euros, or three hundred forty-seven million dollars, in unpaid subscription revenues during its operational period. In a coordinated effort involving Eurojust, police forces seized CINEMAGOAL servers located in France and Germany, which contained the application's source code and the functional mechanisms for decoding protected streams. Furthermore, the investigation also led to the dismantling of another associated IPTV service known as “pezzotto.” Law enforcement is currently analyzing the seized materials to identify all involved parties, including end users, and to estimate the total illicit profits, having already issued penalties ranging from fifteen hundred fifty-four to five thousand euros to the first one thousand identified subscribers. The investigation remains in the preliminary phase as specified by the Guardia di Finanza. Bill Toulas, a technology writer and infosec news reporter, covered this development. |