Hackers Target Free TV Apps to Steal Cookies & User Data

A new study reveals how cybercriminals are stealing billions of web cookies to hijack streaming sessions and manipulate ad costs.

Cord cutters who switched to free streaming platforms like Tubi, Pluto TV, and Plex may face a hidden threat that could compromise their viewing experience.

The Hidden Cookie Crisis

NordVPN’s NordStellar study analyzed 93.7 billion cookies found for sale on dark web forums and Telegram channels. The research uncovered a massive underground market where stolen session data gets sold to the highest bidder.

“Most cookies are harmless. But in the wrong hands, even the smallest crumb can reveal a whole digital trail,” the study warns.

The data shows cybercriminals use 38 types of malware, including 26 new variants discovered in 2024, to steal personal information stored in cookies. This includes names, email addresses, home addresses, and even passwords.

Major Platforms Under Attack

The study found that big tech services face the heaviest targeting:

• Google Services (Gmail, Drive, Maps): 4.5 billion stolen cookies
• YouTube: Over 1 billion compromised cookies

These stolen cookies allow attackers to impersonate users on ad-supported streaming services, potentially altering account settings or adding premium charges without permission.

United States Ranks High in Cookie Theft

Among 253 countries analyzed, the U.S. ranked fourth for total cookie theft:

1. Brazil: 7.1 billion cookies (9.71% of total)
2. India: 6.1 billion cookies (6.54% of total)
3. Indonesia: 4.5 billion cookies (6.54% of total)
4. United States: 3.7 billion cookies (3.91% of total)

Windows devices proved most vulnerable, though over 13.2 billion cookies were stolen from unknown operating systems.

Why Free Streaming Users Are at Risk

Cord cutters who rely on free, ad-supported platforms face specific vulnerabilities. Compromised cookies can:

• Hijack viewing sessions to expose watch history or charge unauthorized fees
• Inflate advertising costs by auctioning off viewing habits to third-party trackers
• Track behavior across devices from phones to smart TVs, building detailed user profiles

“What was designed for convenience is now a growing vulnerability exploited by cybercriminals worldwide,” says Adrianus Warmenhoven, NordVPN’s cybersecurity expert.

Six Ways to Protect Your Streaming Sessions

Streaming fans can take simple steps to protect themselves:

1. Use a Quality VPN Service – Connect through a quality VPN to encrypt your browsing and block malicious domains
2. Reject Third-Party Cookies – Click “Reject all” on cookie banners or customize settings for essential cookies only
3. Stream in Private Mode – Use incognito browsing to automatically clear cookies when sessions end
4. Clear Cookies Regularly – Schedule routine cleanups on all devices, especially shared ones
5. Disable Ad Personalization – Turn off Google’s “Ad Personalization” in Data & Privacy settings
6. Avoid Public Wi-Fi – Stick to secure, encrypted connections when streaming content

Final Thoughts

Cookie theft represents a real threat to cord cutters who depend on free streaming services for entertainment.

The good news is that taking a few minutes to adjust your browser settings and clear cookies regularly can go a long way toward protecting your privacy and preventing session hijacking.

For more information on this story, refer to NordVPN’s study and the report from Cord Cutter News.

We want to know your thoughts. What do you think about this story? Let us know in the comment section below!

Be sure to stay up-to-date with the latest streaming news, reviews, tips, and more by following the TROYPOINT Advisor with updates weekly.