How YouTubers Get Hacked
About this video
The creator interviews security researcher and YouTuber John Hammond about a phishing attack that nearly caught Hammond himself and is used to take over YouTube channels. It began with a genuine-looking Google Drive notification and a legitimate Google email saying an item had been shared, a ‘YouTube copyright report’ — frightening for a creator because of copyright strikes — though the sharing email address looked suspicious. The report’s link led to a get-report site with Hammond’s email address included as a parameter, apparently for tracking victims. Hammond investigated in safer environments: the site did nothing in Tor and nothing via curl until he supplied a normal Chrome user agent, which he explains as malware operators filtering out researchers and non-typical browsers. The download, later also hosted via Discord and Dropbox links, was a large zip containing a Windows executable disguised as a screenshot or document file. Hammond says that, if detonated in a real environment, the payload is the RedLine information stealer, which harvests saved browser sessions, logons, usernames and passwords and sends them to the attackers. The video is framed as a warning to creators to share with other YouTubers.
Key takeaways
- Attack arrived via a real Google Drive share notice for a fake copyright report
- The sharing address was a visible clue the report was not legitimate
- Malicious site behaved differently based on browser user agent
- Payload was a Windows executable disguised inside a zip download
- Hammond identifies it as RedLine, stealing credentials and browser sessions
Episode details: published August 30, 2022 · 11:41 long. Summary written by Self Growth Videos from the episode itself. Business results and any income figures mentioned are NetworkChuck’s own claims, shared for education — they are not typical or guaranteed.
← Previous: build a meme Python website (Flask Tutorial for Beginners) · Next: Docker Compose will BLOW your MIND!! (a tutorial) →
All NetworkChuck videos · NetworkChuck profile · NetworkChuck on YouTube
