{"id":26894,"date":"2019-05-07T09:13:11","date_gmt":"2019-05-07T13:13:11","guid":{"rendered":"https:\/\/www.kaspersky.com\/blog\/?p=26894"},"modified":"2019-11-15T06:26:29","modified_gmt":"2019-11-15T11:26:29","slug":"youtube-channel-owners-phishing","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com\/blog\/youtube-channel-owners-phishing\/26894\/","title":{"rendered":"Dear YouTubers, phishers are after your accounts"},"content":{"rendered":"<p>Do you have a channel on YouTube? How\u2019s it doing \u2014 got more than a thousand subscribers yet? If so, you can expect a message something like this: \u201cWe\u2019re evaluating your request for monetizing your YouTube channel.\u201d The problem is, it might be fake.<\/p>\n<p>In the wake of recent campaigns targeting <a target=\"_blank\" href=\"https:\/\/www.kaspersky.com\/blog\/instagram-hijack-new-wave\/25997\/\" rel=\"noopener noreferrer nofollow\">Instagram<\/a> and Twitter accounts, cyberthieves are now after YouTube creators.<\/p>\n<p>More than a year has passed since YouTube last tightened its regulations on the requirements a channel\/creator must meet to monetize videos (the current ones date back to February 2018). These days, ad-supported channels need to comply with several criteria, including having at least 1,000 subscribers and 4,000 hours of overall watch time within the past 12 months. It\u2019s no wonder most YouTubers take a notification about a thorough account review extremely seriously.<\/p>\n<h2>What does this new YouTube scam look like, exactly?<\/h2>\n<p>\u201cOur team reviewed your channel. \u2026 We\u2019ve detected more than one violation in the process of reviewing your account,\u201d says the text under the official YouTube logo, which also notes that the enterprise controls all YouTube channels manually. Therefore, it asks you to fill in your data and send the e-mail back.<\/p>\n<p>The information the phishers are asking you to give away includes your channel URL and your password. According to affected YouTubers, the fake notifications come to their public e-mail, not to the address they use to link to their channels (if they are different).<\/p>\n<p>As soon as the phishers get your data, they try to take over your account. What for? Well, they might scam your followers (and not only yours) by running a phishing ad under your name, promoting a fake giveaway, announcing a contest with valuable prizes \u2026 and the list goes on. The possibilities are endless.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">ATTN: <a href=\"https:\/\/twitter.com\/YouTube?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">@YouTube<\/a> creators <a href=\"https:\/\/twitter.com\/i1Tesla?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">@i1Tesla<\/a> @LikeTeslaKim <a href=\"https:\/\/twitter.com\/tesla_raj?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">@tesla_raj<\/a> <a href=\"https:\/\/twitter.com\/Model3Owners?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">@Model3Owners<\/a> @BenSullins <a href=\"https:\/\/twitter.com\/marc_benton?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">@marc_benton<\/a> <a href=\"https:\/\/twitter.com\/TesLatino?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">@TesLatino<\/a> @Teslatunity (plz tag others you know of). I got this phishing email today from \"editor.monetized.channel@gmail.com\" asking for my password. DO NOT RESPOND &amp; REPORT IT <a href=\"https:\/\/t.co\/GVWZ33YEMc\" target=\"_blank\" rel=\"noopener nofollow\">pic.twitter.com\/GVWZ33YEMc<\/a><\/p>\n<p>\u2014 Tesla Joy (@TeslaJoy) <a href=\"https:\/\/twitter.com\/TeslaJoy\/status\/1125143995519094784?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">May 5, 2019<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<h3>How to protect your account<\/h3>\n<ul>\n<li>Keep in mind that YouTube will never ask for your account password in an e-mail.<\/li>\n<li>Always check everything thoroughly before reacting to an e-mail, especially if you\u2019re not sure who the sender actually is.<\/li>\n<li>Enable two-factor authentication for your account, Google offers this option for all of its apps and services, including YouTube. To learn how to activate 2FA, click <a target=\"_blank\" href=\"https:\/\/support.google.com\/accounts\/answer\/9096865\" rel=\"noopener noreferrer nofollow\">here<\/a>.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>This phishing campaign is so convincing that even savvy YouTubers may be duped into giving crooks control of their accounts.<\/p>\n","protected":false},"author":2508,"featured_media":25601,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[5,2683],"tags":[1218,19,22,187,76,211,1297],"class_list":{"0":"post-26894","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-news","8":"category-threats","9":"tag-2fa","10":"tag-email","11":"tag-google","12":"tag-passwords","13":"tag-phishing","14":"tag-social-media","15":"tag-youtube"},"hreflang":[{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/youtube-channel-owners-phishing\/26894\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/youtube-channel-owners-phishing\/15755\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/youtube-channel-owners-phishing\/13284\/"},{"hreflang":"ar","url":"https:\/\/me.kaspersky.com\/blog\/youtube-channel-owners-phishing\/6192\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/youtube-channel-owners-phishing\/17664\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/youtube-channel-owners-phishing\/15809\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/youtube-channel-owners-phishing\/14517\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/youtube-channel-owners-phishing\/18399\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/youtube-channel-owners-phishing\/17292\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/youtube-channel-owners-phishing\/22707\/"},{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/youtube-channel-owners-phishing\/5940\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/youtube-channel-owners-phishing\/11702\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/youtube-channel-owners-phishing\/11787\/"},{"hreflang":"pl","url":"https:\/\/plblog.kaspersky.com\/youtube-channel-owners-phishing\/10708\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/youtube-channel-owners-phishing\/19177\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/youtube-channel-owners-phishing\/23183\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/youtube-channel-owners-phishing\/18357\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/youtube-channel-owners-phishing\/22592\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/youtube-channel-owners-phishing\/22526\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com\/blog\/tag\/phishing\/","name":"phishing"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/26894","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/users\/2508"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/comments?post=26894"}],"version-history":[{"count":3,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/26894\/revisions"}],"predecessor-version":[{"id":29453,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/26894\/revisions\/29453"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/media\/25601"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/media?parent=26894"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/categories?post=26894"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/tags?post=26894"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}