Italy Disrupts CINEMAGOAL Piracy App That Stole Streaming Auth Codes
Italy Disrupts CINEMAGOAL Piracy App 🚨
Italian authorities have dismantled a piracy ecosystem centered around the CINEMAGOAL app that provided access to various streaming platforms, including Netflix, Disney+, and Spotify. Unlike typical IPTV service providers that openly market themselves online, CINEMAGOAL’s approach was stealthier, using an app that customers installed on their devices.
During the large-scale anti-piracy operation called “Tutto Chiaro” (All Clear), Italian law enforcement conducted 100 searches across the country and seized materials that could help investigators identify involved individuals and determine the amount of illegal profits. According to Guardia di Finanza, the operators of CINEMAGOAL likely made millions of euros from audiovisual piracy, unauthorized computer access, and computer fraud.
The CINEMAGOAL app connected directly to legitimate streaming platforms and authenticated using valid decryption codes fetched from foreign servers. The system used virtual machines in Italy to capture valid authentication/decryption codes from legitimate subscriptions every 3 minutes and redistribute them to customers. These subscriptions were opened using false identification data on Sky, DAZN, Netflix, Disney+, and Spotify.
Authorities highlight that CINEMAGOAL not only evaded blocks but also offered superior streaming quality, as users streamed content directly from the service rather than receiving a pirate stream, masking customers’ real IP addresses. Guardia di Finanza explains that this was “A highly advanced and previously unseen system that not only bypassed the security blocks implemented by the platforms but also increased viewing quality, reducing the possibility that end users could be ‘intercepted’“ by the control system.
In an action coordinated by Eurojust, police forces seized CINEMAGOAL servers in France and Germany that contained the app’s source code and functions for decoding protected streams.
The illegal streaming business had more than 70 resellers, who sold annual subscriptions between €40 and €130 ($46-$150). Payments were made using cryptocurrency or to foreign bank accounts registered under fake names. It is estimated that CINEMAGOAL has caused damages of around €300 million ($347M) in unpaid subscription revenues over its operation. Authorities have already identified many subscribers and sent penalties ranging from €154 to €5,000 ($179-$5,800) to the first 1,000 of them. The investigation into CINEMAGOAL is still in a preliminary phase, as specified by Guardia di Finanza. During the same law enforcement action, an IPTV service known as “pezzotto” was also identified and dismantled.