The way the groups typically achieve rips from streaming services is by using compromised Widevine L1 capable devices, and straight up extracting out the keys.

The way the groups typically achieve rips from streaming services is by using compromised Widevine L1 capable devices, and straight up extracting out the keys. This ends up in a dance of getting new devices when they eventually get blacklisted.