1 year, 9 months ago

Explained | Why are YouTube creator accounts with large followings targeted by hackers?

The story so far: On June 5, veteran Indian journalist Barkha Dutt said the email and YouTube channels of her digital news platform The Mojo Story were hacked by cybercriminals. When hackers intend to use stolen YouTube accounts to distribute links to malicious websites or malware, they change the name, profile, and content of these channels often imitating the accounts of a larger company or well-known individuals to increase the scope of the attack. Cookie theft or attacks to steal session tokens have been around for some time now, and are also known as “pass-the-cookie attacks”, Google’s Threat Analysis Group shared in a blog post. The malware contained within the files is then used to steal session tokens from the victim’s browsers, which in turn are used to access the victim’s account. Cloud links are similarly used by attackers to gain access to victims’ session tokens to bypass the need for login credentials.

The Hindu

Discover Related