ESET warns of fake sponsorship scams targeting YouTube creators

Cybersecurity firm ESET has issued a warning regarding a sophisticated phishing scam targeting YouTube content creators. The scheme involves fraudulent sponsorship offers that can lead to the hijacking of Google accounts.

The scam begins with highly personalized emails that impersonate well-known global brands such as Nike, Spotify, and Hollyland. To build credibility, attackers often reference specific details from the creator's videos and offer long-term collaborations or free devices.

Unlike traditional phishing attempts that immediately request passwords, this method uses a multi-step process to build trust. Creators are invited to visit professional-looking fake collaboration platforms that feature campaign metrics, brand logos, and even income calculators. These platforms may request the creator's YouTube URL to gather public information and enhance the illusion of legitimacy before attempting to compromise the user's account.