Security News > 2023 > April > Phishing emails from legit YouTube address hitting inboxes
Phishers are targeting YouTube content creators by leveraging the service's Share Video by Email feature, which delivers the phishing email from an official YouTube email address.
The email informs the targets of a new monetization policy, new rules, and prompts them to view a video.
The email also contains and points to a document hosted on Google Drive and provides the password for opening it.
Social media content creator Kevin Breeze has warned YouTube about this particular scam and noted that this is not a simple case of spoofed email, but rather a more sophisticated attack where scammers are taking advantage of the platform's sharing system.
Users should know that YouTube will never ask for their login credentials via email, and they should always be wary of responding to unsolicited emails from unknown senders, even if they appear to be coming from a company's official email.
Breeze proposed that YouTube remove the Share Video by Email feature completely.
News URL
https://www.helpnetsecurity.com/2023/04/07/youtube-phishing-email/
Related news
- YouTube warns of AI-generated video of its CEO used in phishing attacks (source)
- Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails (source)
- Coinbase phishing email tricks users with fake wallet migration (source)
- Why it's time for phishing prevention to move beyond email (source)
- New Morphing Meerkat Phishing Kit Mimics 114 Brands Using Victims’ DNS Email Records (source)
- PoisonSeed phishing campaign behind emails with wallet seed phrases (source)
- Phishing Campaigns Use Real-Time Checks to Validate Victim Emails Before Credential Theft (source)
- Phishing emails delivering infostealers surge 84% (source)
- The dark side of YouTube: Malicious links, phishing, and deepfakes (source)