HACKERS EXPLOIT FAKE BRAND DEALS TO TARGET YOUTUBE CREATORS WITH MALWARE- CLOUDS REPORT. (PHOTO).

 In a new wave of cyberattacks, hackers are targeting popular YouTube creators with fake brand collaboration offers to deliver malware, according to a report by cybersecurity firm CloudSEK. The attackers trick victims by sending fraudulent emails that include documents disguised as contracts or promotional materials. These files are typically shared through password-protected links hosted on platforms like OneDrive to avoid detection by security tools.

Once the file is downloaded and opened, the malware installs itself on the victim’s computer. Security researcher Mayank Sahariya explained that the malware can steal sensitive information such as login credentials, financial data, and intellectual property. It also gives hackers remote access to the victim’s system, potentially allowing them to cause further harm or carry out additional attacks.

The cybercriminals usually include detailed instructions and a OneDrive link to a zip file in their emails, making the fake brand offer appear authentic. The zip file contains the so-called agreement and promotional materials, along with a password to open it. When victims click on the link, they are directed to a seemingly legitimate drive page. However, opening the file triggers the installation of the malware, compromising their systems.

This alarming trend highlights the importance of caution when dealing with unsolicited emails, even if they seem professional. CloudSEK advises creators and other professionals to verify the authenticity of brand collaboration offers and avoid downloading files or clicking on links from unknown sources. Strengthening security measures and staying vigilant can help reduce the risk of falling victim to such cyberattacks.