Phishing Campaign Targets YouTube Creators

CloudSEK reports an active phishing campaign targeting YouTube creators with impersonated brand collaboration offers that lure victims to OneDrive links and malicious attachments which install stealer malware; researcher access to the attacker backend revealed automation, harvested email lists, stealer logs (including SMTP accounts, proxies, Google Cloud APIs, victim cookies), and phishing templates, indicating a scalable, organized credential/theft-focused operation.