Italy Dismantles CINEMAGOAL Piracy Network Accused of Stealing Streaming Codes

Summary
Italian authorities say the CINEMAGOAL app captured valid authentication codes from legitimate subscriptions to provide streaming access. The Eurojust-coordinated “Tutto Chiaro” operation seized servers in France and Germany and led to 100 searches; the investigation is
Key points
- Italian authorities say CINEMAGOAL provided access to services including Netflix, Disney+, Spotify, Sky and DAZN using authentication/decryption codes from legitimate subscriptions.
- The system reportedly used virtual machines in Italy to capture valid codes every three minutes and redistribute them to customers.
- Authorities say subscriptions were opened using false identification data and that the app masked customers’ real IP addresses.
- The Eurojust-coordinated “Tutto Chiaro” operation included 100 searches in Italy and the seizure of servers in France and Germany containing the app’s source code and stream-decoding functions.
- Officials say the network had more than 70 resellers and estimate around €300 million in unpaid subscription revenue; the investigation remains preliminary.
- Authorities have identified subscribers and sent penalties to the first 1,000, ranging from €154 to €5,000.
Article Details
- Event Type
- Italian law enforcement disruption of the CINEMAGOAL piracy network and related unauthorized streaming access.
- Impact
- Authorities seized CINEMAGOAL servers in France and Germany and conducted 100 searches in Italy. The app used authentication/decryption codes obtained from legitimate subscriptions to provide unauthorized access to streaming services. Authorities estimate unpaid subscription revenue losses of about €300 million; they have also identified subscribers and issued penalties to the first 1,000. The investigation remains in a preliminary phase.
MITRE ATT&CK
Threat Actors
Products
CINEMAGOALItalian authorities dismantled the CINEMAGOAL piracy network, which used a covert app to give users access to Netflix, Disney+, Spotify, and other platforms through stolen authentication codes.DAZNThese legitimate subscriptions were opened using false identification data on Sky, DAZN, Netflix, Disney+, and Spotify.Disney+Italian authorities dismantled the CINEMAGOAL piracy network, which used a covert app to give users access to Netflix, Disney+, Spotify, and other platforms through stolen authentication codes.NetflixItalian authorities dismantled the CINEMAGOAL piracy network, which used a covert app to give users access to Netflix, Disney+, Spotify, and other platforms through stolen authentication codes.SkyThese legitimate subscriptions were opened using false identification data on Sky, DAZN, Netflix, Disney+, and Spotify.SpotifyItalian authorities dismantled the CINEMAGOAL piracy network, which used a covert app to give users access to Netflix, Disney+, Spotify, and other platforms through stolen authentication codes.
Countries
FranceThe operation, coordinated with Eurojust and known as “Tutto Chiaro,” led to server seizures in France and Germany, widespread searches across Italy, and the identification of resellers, subscribers, and illicit profits.GermanyThe operation, coordinated with Eurojust and known as “Tutto Chiaro,” led to server seizures in France and Germany, widespread searches across Italy, and the identification of resellers, subscribers, and illicit profits.ItalyThe operation, coordinated with Eurojust and known as “Tutto Chiaro,” led to server seizures in France and Germany, widespread searches across Italy, and the identification of resellers, subscribers, and illicit profits.
