YouTube Crypto Con: Scammers Rake in $600K with Deepfakes and QR Codes

Bitdefender researchers describe a growing YouTube "stream-jacking" campaign in which attackers hijack or mimic high-profile channels and use deepfake livestreams and ads, QR-code prompts, and compromised access tokens (via stealers) to run cryptocurrency doubling scams; scammers have impersonated celebrities and brands, used automated channel revamps and artificial viewer boosting, and reportedly netted about $600K, highlighting challenges in detecting deepfakes and preventing account takeovers.