

Make sure you use a website reputation tool like McAfee WebAdvisor to avoid landing on phishing and malicious sites. Use security software to surf the web safely.

You should be able to check the status of your account on the company website or under the settings portion of the Spotify app to determine the legitimacy of the request. Be skeptical of emails claiming to come from legitimate companies. If you receive an email asking to confirm your login credentials, go directly to the company’s website.If the URL preview doesn’t seem to be related to the company, it is most likely a phishing email. And if you’re still unsure of whether the email is legitimate or not, hover your mouse over the button prompting you to click on the link (but don’t actually click on it).


When the user clicks on it, they are redirected to a phony Spotify website where they are prompted to enter their username and password for the hacker’s disposal. However, the link contained in the email is actually a phishing link. So, how are the account hijackers conducting these phishing attacks? The campaign sends listeners fraudulent emails that appear to be from Spotify, prompting them to confirm their account details. The campaign lures users into giving up their account details, putting innocent Spotify customers’ credentials at risk. While the music streaming platform is a convenient tool for users to download and listen to their music, hackers are capitalizing on the company’s popularity with a recent phishing campaign. Many music-lovers around the world use Spotify to stream all of their favorite tunes.
