Phishing attacks are one of the most common forms of cyberattacks leveraged by cybercriminals.

The latest disclosing of Google’s Threat Analysis Group (TAG) has disrupted financially motivated phishing campaigns targeting YouTubers with Cookie Theft malware.

Cookie theft

Cookie theft occurs when a third party copies unencrypted session data and uses it to impersonate the real user. Cookie theft most often occurs when a user accesses trusted sites over an unprotected or public Wi-Fi network. It occurs when a person mimicks a person’s cookie over the same network, thus a hacker can access sites and perform malicious actions.

Phishing campaigns and YouTube creators

The phishing campaigns targets many YouTube creators by sending forged business emails to their email which they have provided in their channel. They impersonate as an existing company requesting a video advertisement collaboration. When the link is clicked, it would infect their computer using a variety of malware programs, usually designed to steal cookies and passwords.

More detailed version of how you can be safe from cookie thefts
published at: https://beaglesecurity.com/blog/article/cookie-theft-youtube-phishing-campaign.html