Creators are being targeted with fake paid-sponsorship emails that name real brands like Nike and Spotify and even reference your actual videos, according to ESET researchers. After a bit of back-and-forth, you’re sent to a slick ‘collaboration platform’ that asks you to sign in with Google. A fake login page there can steal your password and one-time code, and with them your whole Google account; a permissions request can hand over control of your channel. Once scammers are in your account, they can swap your recovery details to make it much harder to get back.
The move
A brand deal is never a reason to type your Google password or a one-time code into someone else’s site. Find the brand’s contact details yourself, check the offer’s real, and loop in a trusted adult. If a sign-in screen asks to manage your channel, say no.
Practise it: Would You Click? →
Seen via ESET WeLiveSecurity