YouTube accounts on the partner program are being hacked
twitter.comhttps://www.youtube.com/watch?v=ry8oY1-aiq8 Here is the video summarizing what happened.
Hacker posed as a potential sponsor and sent the YouTuber files including a weaponized .src file (I think he meant .scr file) disguised as a pdf.
Once executed it, it didn't appear to do anything but in the background it shared the YouTuber's cookies/session data with the hacker. With access they changed 2fa and changed his channel to a Tesla channel. He lost over 1000 subscribers and it took him a day or so to get his channel back.
Thank you. It’s not just him either. If you go to Reddit and search the YouTube subreddit for “hack” you’ll see it’s affected so many more people. This is bigger than it seems and YouTube needs to sort this out fast!