YouTube creators are being targeted by a phishing campaign that poses as a brand seeking sponsorship partners. The scammers send personalized emails that reference the creator's own videos, making the approach appear legitimate and tailored to the individual.
The emails direct creators to a convincing fake collaboration platform designed to harvest Google account credentials. By mimicking a standard sponsorship workflow, the attackers aim to trick victims into entering sensitive login information, potentially leading to full account takeover.
Because the messages reference real content, the campaign is harder to spot than generic phishing attempts. Creators should treat unsolicited sponsorship offers with caution and verify any platform independently before entering credentials.