Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [QUIET] · [TECHNOLOGY]
3 clusters · 9 sources · 24 days · First seen · Last updated
YouTube creator phishing campaign
Overview
Cybersecurity experts have identified a sophisticated phishing campaign targeting YouTube content creators, particularly in Latin America, through fraudulent sponsorship offers. Attackers impersonate legitimate global brands to establish credibility, often using personalized emails that reference a creator’s specific content.
The scam typically involves a transition from commercial negotiations to a request for the victim to log in to a fraudulent platform that mimics a professional collaboration site. Under the guise of verifying channel statistics, agreements, or payments, the platform solicits Google login credentials to hijack accounts.
In documented cases, scammers have impersonated the audiovisual equipment manufacturer Hollyland. While the company is legitimate, it has clarified it was not involved in these communications. Investigators note that malicious actors frequently change brand identities, names, and domains to evade detection.
Cybersecurity firm ESET has issued a warning regarding the scheme, noting that attackers may impersonate well-known brands such as Nike and Spotify. To build trust, the method uses a multi-step process where creators are invited to visit professional-looking fake collaboration platforms. These sites may feature campaign metrics, brand logos, and income calculators. They may also request a creator’s YouTube URL to gather public information, further enhancing the illusion of legitimacy before attempting to compromise the user’s account.
Entities
Timeline
-
[TECHNOLOGY] 3 sourcesESET warns of fake sponsorship scams targeting YouTube creators
ESET warns YouTube creators of a sophisticated phishing scam where fake sponsorship offers from brands like Nike and Spotify are used to hijack Google accounts via deceptive collaboration platforms.
-
[TECHNOLOGY] 2 sourcesYouTube creators targeted by brand deal phishing scams
Fraudsters are using sophisticated brand deal scams to target YouTube creators, impersonating companies like Hollyland to steal Google accounts via fake collaboration platforms.
-
[TECHNOLOGY] 4 sourcesESET warns of YouTube account theft via fake sponsorships
ESET warns of a phishing campaign in Latin America where attackers impersonate global brands to steal YouTube accounts through fake sponsorship proposals.
Sources
cybernoz.com · diariocoimbra.pt · donanimhaber.net.tr · elsumario.com · g5noticias.cl · noti-rse.com · techinside.com · welivesecurity.com · yesilafsin.com
This summary has been updated 1 time: see revision history