Holy crap! @ytcreators can you help Lee out?
Lee Zavitz @ZavitzLee
9 Sep 2020
My email and YouTube account was hacked and they are deleting my videos. I had two factor authentication. @ytcreators can you help??
2
1
19
Yt DM me. Have to be careful on sponsorship deals. wasn’t some random link. I don’t think im that stupid. I had been negotiating with them on a legit product for a couple days. with a person who is legit in the company they are spoofing. link for talking points that’s what did it
3
10
Damn. So the download was a virus, or keylogger? You on Mac or PC? We Mac users like to think we’re immune to stuff like this but probably not…
1
1
It was a windows executable disguised as a .scr file, no keylogger needed for this, it was able to pick up the browser cookies from the hard drive. It could have happened on Mac just as easily.
1
1
And the browser cookies had the passwords stored in a way that was readable?!
1
Replying to @photojoseph @ZavitzLee @every_daydad @YTCreators
No, the cookies are how the browser is logged in to google. No passwords needed, 2fa doesn't matter. I'm thinking I might need to make a video on this.

Sep 10, 2020 · 2:09 PM UTC

2
2
Replying to @aaronpk @ZavitzLee @every_daydad @YTCreators
That is CRAZY that all you need is the cookies to access any account — especially a google one! So if I just sent you my cookies folder… you’d have access to anything I was logged into?!
1
💯 There aren't really any other tools browsers can use for this right now. The process of logging in looks like basically: you type your password in google, google gives you back a cookie, your browser makes a request with that cookie and the server knows who it's for.
1
more replies
Replying to @aaronpk @photojoseph @ZavitzLee @YTCreators
So would have two separate email accounts help? One solely for the YouTube channel, and one for business in case of a malignant file?
1
Interestingly that doesn't even matter for this since it wasn't the "normal" phishing style attack. Don't open files you download is the only safe thing, or open them on a machine that isn't logged in to anything. That obvs isn't practical, so it's a lot harder in practice.
1