Hackers Easily Stole A Bunch Of High-Profile YouTube Channels

According to ZDNet, a recent investigation has revealed a surging wave of cyber-attacks aiming to YouTube Creators. Amid the chaos, creators working in the auto-tuning and car reviewing has suffered most of the consequences while losing their access to those channels. As part of that, a bunch of well-known creators from car community on YouTube have been left as victims to these hack attacks, such as PURE Function, Troy Sowers, Built and so on.

Not only the car community on YouTube are worried about this but a bunch of YouTubers creating other content has also got aimed from this wave of attack. Several YouTubers, including Indian creators, have announced that these attacks led to their accounts hijacked. Notably, a coordinated campaign is reportedly behind this fatal flaw as it resulted in luring people to phishing websites by emails. After hackers exploited their data bounty from unfortunate creators, they would try to use these credentials to log in through fake Google login pages. Once it’s done, hackers then broke into these accounts and reassigned the well-known channels to new owners. What’s more, the original URLs have also been changed so people would wrongly notify that these accounts had been removed, either followers or legitimate owners.

Since then, Twitter had seen a flood of complaining tweets from YouTubers about their lost accounts. In fact, some of these accounts had come with two-factor authentications, which adds an important protective layer for privacy. However, hackers had to make use of reverse proxy toolkits to break the 2FA shield. One of such suspicious toolkits might be a phishing package named Modlishka.

Askamani, a hacker has commented: “Those accounts need to be dumped really quick before YouTube gives them back to their original owners."