Security News > 2023 > April > Phishing emails from legit YouTube address hitting inboxes

Phishers are targeting YouTube content creators by leveraging the service's Share Video by Email feature, which delivers the phishing email from an official YouTube email address.

The email informs the targets of a new monetization policy, new rules, and prompts them to view a video.

The email also contains and points to a document hosted on Google Drive and provides the password for opening it.

Social media content creator Kevin Breeze has warned YouTube about this particular scam and noted that this is not a simple case of spoofed email, but rather a more sophisticated attack where scammers are taking advantage of the platform's sharing system.

Users should know that YouTube will never ask for their login credentials via email, and they should always be wary of responding to unsolicited emails from unknown senders, even if they appear to be coming from a company's official email.

Breeze proposed that YouTube remove the Share Video by Email feature completely.

News URL

https://www.helpnetsecurity.com/2023/04/07/youtube-phishing-email/