YouTube Becomes Latest Battlefront for Phishing, Deepfakes

### Executive summary Researchers at Avast found that YouTube is being actively abused as a traffic distribution platform for phishing, malware (including Lumma and RedLine), deepfake-enabled cryptocurrency scams, and hijacked high-subscriber channels; attackers use personalized phishing to creators, compromised video descriptions, fraudulent domains, and social-engineered videos to drive victims to malicious pages. Avast reports protecting millions of users from these threats, underscoring a high-volume, consumer-focused campaign leveraging multiple TTPs rather than a single vulnerability.