INSUBCONTINENT EXCLUSIVE:
YouTube creators are having their accounts hijacked in what appears to be a coordinated campaign launched against the platform with hackers
focusing on users from the auto-tuning and car review community.A number of high-profile accounts from the YouTube creators car community
have already been targeted including Built, Troy Sowers, MaxtChekVids, PURE Function and Musafir.However, creators from other communities on
the platform also reported having their accounts hijacked over the past few days.The massive wave of account hijacks is the result of a
coordinated campaign which used messages to lure users to phishing sites where hackers were able to obtain their credentials.After speaking
hackers used phishing emails to lure victims to fake Google login pages where they collected their account credentials, then they broke into
their Google accounts, re-assigned popular channels to new owners and finally they changed the channel's vanity URL to trick account
owners into thinking their channels had been deleted.Some of the creators targeted by the campaign received individual emails while others
said they had received email chains that included the addresses of multiple YouTube creators, often from the same community or niche.On
creator whose channel is called Life of Palos confirmed that hackers were apple to bypass the two-factor authentication protecting his
He believes those behind the campaign could have used a reverse proxy-based phishing toolkit called Modlishka which is used to intercept 2FA
However, there are a number of reverse proxy-based phishing toolkits available on the dark web which could have been used instead.Those
behind these account takeover attacks have not yet come forward and neither Google nor YouTube has issued a public response regarding the
coordinated campaign.Via ZDNet
