Google’s Threat Analysis Group has recently published a report detailing how phishing hackers have hijacked popular YouTube accounts over the past few years to make money through cryptocurrency scams and other methods.
Since late 2019, Google has tracked and disrupted the scammers, described as “a group of hackers recruited in a Russian-speaking forum.” Combining cookie-based malware and social engineering tactics, their operational model isn’t very sophisticated nor radically innovative, but it’s proven to be extremely effective, given the method’s popularity.