A popular technology YouTube Channel with millions of followers got hacked a couple of days ago. Here is a detailed video that goes over how they got hacked.
TL/DW: Someone in the office clicked on a PDF attachment thinking it was a contract from a potential sponsor. It was not a PDF, it was malware. The malware stole the browser cookies which allowed the attacker use the Google session cookies to go to YouTube as if they had logged into it using the correct credentials. They changed the channel name to Tesla, uploaded a video of a livestream with Elon Musk and posted a link to a scam site promising to double various crypto currencies.
TL/DW: Someone in the office clicked on a PDF attachment thinking it was a contract from a potential sponsor. It was not a PDF, it was malware. The malware stole the browser cookies which allowed the attacker use the Google session cookies to go to YouTube as if they had logged into it using the correct credentials. They changed the channel name to Tesla, uploaded a video of a livestream with Elon Musk and posted a link to a scam site promising to double various crypto currencies.

Comment