ESET warns of YouTube account theft via fake sponsorships

Cybersecurity firm ESET has issued an alert regarding a phishing campaign targeting YouTube content creators in Latin America. Attackers are impersonating well-known global brands to propose fake sponsorship and collaboration opportunities.

The scam follows a specific pattern: attackers initiate contact via email with professional-looking proposals, often using the names of legitimate companies to gain credibility. In one documented case, a journalist in Peru received a fraudulent “Paid collaboration opportunity” from an individual claiming to represent the Creator Partnerships team at Hollyland. While Hollyland is a legitimate audiovisual equipment manufacturer, the company has clarified it was not involved in these communications.

The deception typically progresses from a commercial negotiation to a request for the creator to log in via Google on a fraudulent platform designed to look professional. This process allows attackers to hijack the user's account. ESET notes that malicious actors frequently change names, domains, and brands to evade detection.