Creator Alert

Hi Reader,

This new hack is going viral and I have been dealing with several YouTube Creators who have fallen for this hack.
​
We were able to stop 2 of the channels from getting hacked, but unfortunately, the others were not so lucky and are now working with YouTube to restore their channels.

Since this isn’t an isolated case, I thought I would quickly let you know what to watch out for:

What is this hack?

Whenever you sign into your Google account from a new device, you receive several notifications to confirm that it is indeed you.

Hackers are sending emails to YouTube Creator’s Gmail accounts mimicking Google’s notification email.

Their tactic is to get you to click on the “Check activity” button as of course, you didn’t log into your account from a new device.

Once you click on the button, you are taken to a website that looks like the official myaccount Google page, then a pop-up appears prompting you to log in.

This is all fake and a way to get your username and password.

How do they get around your 2-factor authentication?

To get around your 2-factor authentication, they run a script that continuously tries to log into your account which triggers the 2FA notification.

This happens hundreds of times until eventually you think it must be a bug and you click on the button to confirm that it was you.

What should you do?

Don’t click on the Check activity button.

If you get this email rather head to the myaccount.google.com in a web browser. Then head over to the Security option and there you will find all the devices that are connected to your account.

If there is one that isn’t there, remove it and then resecure your account, change the password, and log out of Google to make those tokens redundant.

Keep safe out there,

Liron Segev

Want to secure your YouTube channel? Start here.

​