Not, of course, that a site with an SSL certificate is any guarantee of validity it just means that the site owner has protected the communications channel between browser and website, nothing more.ĭespite 2FA apparently having been circumvented for at least some of these YouTube account attacks Jake Moore says that it's still essential that "every account you own should utilize 2FA." However, this should "ideally be an authenticator app rather than a code sent over SMS," Moore says That's not the case now, and "the removal of Extended Validation (EV) information in the address bar," Houghton says, makes it much harder to spot. It used to be the case that the lack of an HTTPS certificate for a site, signified by the green padlock or similar in the browser address bar, would be enough to set alarm bells ringing, generally speaking. The URL for this mirrored page wasn't "looked at with enough vigilance," says Houghton, as this would likely be obfuscated in some way and not the same as the original Google account page. Then there's the cloned Google login page that the link would have landed at. "Telltale signs such as the link shown in the body of the email or even questioning why you have been sent it in the first place should be enough to pause your actions," Moore says. These phishing emails are usually constructed well and "can look genuine at first glance, even to the trained eye," says Jake Moore, cybersecurity specialist at ESET.
The forum member told ZDNet that someone had got hold of a "real nice database," and were "getting a bang for their buck," as a result. Having spoken to a member of an internet forum where online account hijackers are known to chat, Cimpanu was able to determine that this was likely a highly targeted, or "spear phishing," campaign rather than a spray and pray operation. The investigation by Cimpanu points clearly towards a coordinated phishing campaign. With more than 23 million YouTube channels, anyone who creates content should be heeding this warning though. Amongst those taking to Twitter to complain about their YouTube accounts being hacked and access to their channels lost, were YouTubers covering technology, music, gaming and Disney. However, it would also appear the attack itself has been directed mostly towards "influencers" across many YouTube channel genres. According to the ZDNet investigation, many accounts belonging to well-known YouTubers within the car community appear to have been hijacked.
0 kommentar(er)
