They can use different strategies, as we are going to explain. It is important that you are aware of the danger that may arise when clicking on a false link or downloading a file that may be a fraud. They could even broadcast live videos and offer supposed prizes or incentives to attract victims.
Attacks on channels with many followers
They will have several options to attack through channels that have many subscribers, from well-known people on the Internet. One of those options is directly steal the account. They could use many methods, such as theft of session cookies, brute force attack or password guessing, infection with some type of malware, Phishing attack… Basically, any of the many computer attacks that can exist on the network.
But they could also simply create another YouTube account, or another platform, impersonating another person. That account could even be like a secondary one that has created that recognized profile to, supposedly, offer some prize or carry out some interesting action.
From there, the strategies to scam victims they can be different. In many cases, they use well-known brands, as is the case with Tesla. They are going to pretend that the person responsible for that account that they have stolen is broadcasting an information video about that brand and, among all the attendees, they are going to raffle something or give a prize. What they are looking for is to attract the maximum number of subscribers.
Those channels, through those videos they broadcast, are going to try to appear official. This causes them to use recognized brands, to provide greater security and ensure that the victim falls for the bait. They tend to use quite a few scams related to cryptocurrencies, but also many other current topics, such as artificial intelligence.
Protect yourself
What can you do, as a user, to avoid being a victim of these attacks? Something essential is common sense and not make mistakes. Do not download any files or click on any links that may appear in live videos on YouTube unless you are 100% sure that they are legitimate.
Of course, you should never log in, or give personal information, through these means. It’s key maintain privacy and you can achieve that if you keep your data protected. Therefore, not making mistakes is the first thing you should keep in mind to avoid this type of attack on the network.
It is also advisable to have the protected equipment. A good antivirus could help you in case you download a malicious file by mistake. Also have the system updated, since you could correct vulnerabilities that can be exploited by an attacker to steal your data.
As you see, they are using popular YouTube channels and other platforms to scam. They take advantage of the recognition of some content creators to reach users and thus launch attacks. You can always control access to a Stream account and other platforms.
