Cybersecurity firm AppRiver have discovered a phishing campaign specifically targeting Spotify users. The attack is designed to lure users to click on malicious links in an email. The next screen asks victim to enter their Spotify login credentials to remove restrictions on their Spotify account.
While there may be some value in the Spotify account information itself, the real payoff for hackers comes when the victim has used the same username and password for other online accounts, like the credit card used to pay for Spotify, according to AppRiver
