Cybercriminals have stolen some popular YouTube channels from their actual owners
Cybercriminals have targeted a number of YouTube creators over the last few days to take control of popular YouTube channels from their actual owners.
According to ZDNet this new wave of attacks is massive and heavily coordinated, with a major focus on high-quality YouTubers in the automotive and vehicle review community. Some of the car community channels that have already been taken over by attackers include: PURE feature, Troy Sowers, Musafir, Built and MaxtCheckVids.
"My personal YouTube account was hacked and deleted (the account name was PURE Function)," Ryan Scott, the owner of PURE, said in the Google Support Forum.
"That happened last night and I didn't I can see my channel anywhere or even log in to access it, "added Scott." [1
Hackers used phishing to steal owners' credentials. on YouTube channels, and many owners have revealed that hackers send them emails that lure them to the phishing site that look like Google sign-in pages. After the owners entered their YouTube credentials, the attackers used the details to log into Google accounts and redirect the channels to new owners.
They also changed the "URL of vanity 'on the channel, making it look like the channel and the account deleted, even though channels are available for sale in some darknet forums.
Phishing emails that hackers use to lure potential targets are designed so well that they look real at first glance.
According to ZDNet the primary concern for creators is that hackers have managed to bypass two-factor authentication in user accounts. The victim said cybercriminals may have used a reverse proxy-based Modlicka phishing tool to carry out these attacks.
A hacker named Ascamani told ZDNet that the people behind these attacks will need to quickly sell the stolen accounts to a new owner, as YouTube will soon restore all the hijacked accounts and return them to their original ones owners.
Askamani is active on OGUsers, a dark network forum used by hackers to sell hacked accounts, including YouTube.  Askamani also said that a jump in complaints would mean that someone had gotten a "real nice database" and now they are "getting hit for their dollar." Further reading