An inventive YouTube moderator phishing scam

Full marks for inventiveness


If you have a YouTube channel, and have had your fill of sifting through the vile torrent of abusive comments left on your video masterpieces, you can invite other people to moderate them.

It's a simple process that requires you just to enter the URL of another YouTube channel - and a message will automagically be sent to its owner.

So far, so harmless.

But it turns out that it's a feature that can be used for spear-phishing by spammers and scammers. Spammers want to get their unwanted messages into your email inbox, but as anti-spam filters have improved their chances of getting your eyeballs on their messages have reduced over the years.

This inventive spammer has used the "Add comment moderator" feature of YouTube to send me a scam message, claiming that I have "win" (sic) an Apple iPhone X.

Oh, and yes, YouTube has now removed the offending channel.

If you receive similar messages, report them and the channel to YouTube so the user can be banned.

Tip 'o The Hat to Graham Cluley


Topics: Spear Phishing

Subscribe To Our Blog

New call-to-action

Get the latest about social engineering

Subscribe to CyberheistNews