Google Warns YouTubers of Phishing and Malware Campaign GA S REGULAR Menu Lifewire Tech for Humans Newsletter! Search Close GO News > Internet & Security
Google Warns YouTubers of Phishing and Malware Campaign
Beware of suspicious collaboration opportunities
By Rob Rich Rob Rich News Reporter College for Creative Studies Rob is a freelance tech reporter with experience writing for a variety of outlets, including IGN, Unwinnable, 148Apps, Gamezebo, Pocket Gamer, Fanbolt, Zam, and more. lifewire's editorial guidelines Published on October 21, 2021 02:43PM EDT Fact checked by Rich Scherr Fact checked by Rich Scherr University of Maryland Baltimore County Rich Scherr is a seasoned technology and financial journalist who spent nearly two decades as the editor of Potomac and Bay Area Tech Wire. lifewire's fact checking process Tweet Share Email Tweet Share Email Internet & Security Mobile Phones Internet & Security Computers & Tablets Smart Life Home Theater & Entertainment Software & Apps Social Media Streaming Gaming A phishing and malware campaign has been plaguing YouTube channels, taking them over and selling them off or turning them into cryptocurrency scams. Google's Threat Analysis Group has released a report documenting and warning against a prevalent "cookie theft" phishing and malware campaign. For several years, malicious actors have been using it as a way to hijack thousands of YouTube channels. Google states that it's been combating the problem since late 2019 and cautions against suspicious offers for collaboration. Pheelings Media / Getty Images The attackers send phishing emails about antivirus software, VPN, online games, and so on, then link to or include a download for cookie-stealing malware. Typically the emails attempt to impersonate a relevant company, then direct targets to fake (but official-looking) websites. Sites for games on Steam, companies like Luminar and Cisco VPN, and even Instagram pages have been falsified. Once activated, the malware copies and uploads the victim's browser cookies, giving attackers a way to impersonate them and take over. At that point, they either try to sell the channel (with prices ranging anywhere from $3 to $4,000), or they rebrand it to impersonate a tech or cryptocurrency exchange firm. From there, they livestream fraudulent cryptocurrency giveaways and ask for contributions. Xesai / Getty Images While Google states it's been able to protect users from most of these phishing attempts or has restored compromised accounts, it also offers up some advice: Don't ignore browser safety warnings, always perform virus scans, use two-step authentication, and look out for encrypted archives (which can avoid virus scans). Google says double-checking the email addresses of these contacts is also a good idea, as they can usually be a decent giveaway. Big companies often have their own domain names and won't use services like email.cz, seznam.cz, post.cz, or aol.com for official business. Was this page helpful? Thanks for letting us know! Get the Latest Tech News Delivered Every Day Subscribe Tell us why! Other Not enough details Hard to understand Submit More from Lifewire Are iPads Really That Safe from Viruses and Malware? How to Find Real Celebrities on Twitter How to Turn off the Phishing Filter in Internet Explorer Can a Smart TV Get a Virus? The Best Free and Public DNS Servers (October 2022) What Is a Windows SmartScreen Filter? A Brief History of Malware How to Safely Download & Install Software Protect Yourself From Malicious QR Codes Is Google Play Safe? 3 Best Free Antivirus Apps for Android Phones What Is Microsoft Internet Explorer? Can a Router Get a Virus? How to Properly Scan Your Computer for Malware How to Test a Suspicious Link Without Clicking It How to Download and Watch Google Drive Movies Newsletter Sign Up Newsletter Sign Up Newsletter Sign Up Newsletter Sign Up Newsletter Sign Up By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. Cookies Settings Accept All Cookies