On October 24th, a new report shared by the Google Threat Analysis Group (TAG) highlighted the ongoing phishing campaign against YouTube creators. TAG blamed the attack on a group of hackers recruited in Russian forums. They provided Fake cooperation opportunities invaded the creator’s channel. Once hijacked, the YouTube channel is either sold to the highest bidder or used to spread cryptocurrency scams.
The hackers also changed the name, profile picture, and content of the YouTube channel to impersonate a large technology or cryptocurrency trading company. According to reports, the YouTube account was used by hackers with cookie theft malware, which was configured to run on the victim’s computer without being detected.