Malware Hidden in Fake Business Proposals Hits YouTube Creators

CloudSEK reports a global phishing campaign targeting over 200,000 YouTube creators in which attackers scrape channel contact emails and send mass fake collaboration offers containing password-protected OneDrive links to ZIPs; extracted files deploy AutoIt3-based malware (disguised as .exe/.pif) that steals credentials, financial data, and can grant remote access, while attackers use cloud hosting and automated SMTP infrastructure to increase scale and legitimacy.