It's wild how sophisticated the scams are getting. One YouTuber had his entire channel deleted and replaced with crypto livestreams because he clicked on a DocuSign link. www.youtube.com/watch?v=O9sX... - ThreadSky

michaelhobbes.bsky.social • 70 days ago

It's wild how sophisticated the scams are getting. One YouTuber had his entire channel deleted and replaced with crypto livestreams because he clicked on a DocuSign link.
https://www.youtube.com/watch?v=O9sXv11sDnc

Comments

gallifreyknight.bsky.social•70 days ago

Is this a scam? I'm not going to be a live kidney donor if I click the link, am I?

fourmoyle.bsky.social•70 days ago

📌

jackwaltimore.bsky.social•70 days ago

78,000 employees in the United States alone, and DocuSign still can't stop this from happening?

caveatruptur.bsky.social•70 days ago

They're not using Docusign, they're sending people to fake websites to download an EXE made to look like a PDF. The scam is in the amount of work to setup fake Twitter accounts with real people's information taken from LinkedIn.

caveatruptur.bsky.social•70 days ago

In this guy's case, he didn't download the exe, but he did proceed past Chrome's malicious site warning. So a very classic phishing/malware attempt, just more sophisticated social engineering.

jackwaltimore.bsky.social•70 days ago

Not really the point of my tweet but thank you for the color on the scam.

caveatruptur.bsky.social•70 days ago

In that case I'm confused. What can Docusign do here?

jackwaltimore.bsky.social•70 days ago

It was a whole schtick on the old site that DocuSign has an inexplicably massive workforce relative to the complexity of their product.

mikeyp.net•70 days ago

Another example: https://youtu.be/_tlhOBysXOE?si=fv3wKB40-78E9DML

dasgoat.bsky.social•70 days ago

Session jacking right? Scary stuff indeed.

sillyuser789.bsky.social•70 days ago

the irony of saying beware of scams followed by a link is a bit funny

boro610.bsky.social•70 days ago

Is that what happened to the infranaut?

sandywolf.bsky.social•70 days ago

This happened to another YouTuber I follow

basquiatball.bsky.social•70 days ago

Do you know where I can buy that crypto they mention? It sounds like a great opportunity to get into before everybody else piles in

reeidly.bsky.social•70 days ago

Brian_f mentioned

eleanorcercis.bsky.social•70 days ago

This happened to a tiki toker I like and she did a funny skit based on his she couldn't even pay him because banks won't work with him

eleanorcercis.bsky.social•70 days ago

See if this link works. It's pretty interesting. https://www.tiktok.com/@c.m.alongi_author/video/7440152937462123806?is_from_webapp=1&sender_device=pc&web_id=7237273446077154858

roninspoon.bsky.social•70 days ago

Several YouTubers I follow have been caught by this. It’s incredibly easy to get because you only have to look at a single poison attachment and they get all your browser tokens. People who receive a lot of solicitations and invoices are particularly vulnerable. YouTube knows, and does nothing.

vgcatano.bsky.social•70 days ago

Yeah, my favorite exercise channel got hacked and deleted for a while, but he thankfully got it back. Seems like something YouTube should work on!

jctenton.bsky.social•70 days ago

i have solved it by merely insta-blocking all numbers that call or text me, never clicking links, and sending all email directly to the trash

jkpierce.bsky.social•70 days ago

Is it a coincidence he's a prominent member of the fighting game community, or have you been getting more interested?

customcosy.bsky.social•69 days ago

what will, you have it

timothynfrode.bsky.social•70 days ago

Uh, not new. Don’t click links in your email, unless you know you’re expecting it from the person you received it from. Otherwise verify that they actually sent it. Call/message them.

Just don’t click the link. Don’t even try to tell if it’s legitimate.

michaelhobbes.bsky.social•70 days ago

"Don't click the link" seems to be consistent advice in your case since what you're saying is irrelevant to what happened here

timothynfrode.bsky.social•70 days ago

“because he clicked on a DocuSign link.”

Malicious actors convincingly mimic legitimate emails/sites and links to trick people into clicking to a malicious domain, scareware, or into submitting credentials.

There are other compromises but you specifically said a link was clicked. Your words.

timothynfrode.bsky.social•70 days ago

Even if it’s not what happened, that’s good advice because of how convincingly threat actors can mimic emails, websites, and login pages.

I’d rather people avoid those risks, wouldn’t you?

viperx83.bsky.social•70 days ago

What a helpful thing to say.

dashwallkick.bsky.social•70 days ago

It's really bad, and YouTube and Google are totally unhelpful because their reply was "fill out this form and we'll get back to you" and he's basically without income until they do

amusedpolish.bsky.social•70 days ago

It's not just youtube. Meta has had some really bad scams happen this year too. One I know off is the Instagram account from a person educating on fostering orphaned kittens. It was Hannah Shaw from kittenxlady

dashwallkick.bsky.social•70 days ago

*Jesus*, did not know about this, that's terrible

amusedpolish.bsky.social•70 days ago

yes, took her a few weeks to get the account back. It was heartbreaking to see. Since her whole lifelyhood depended on it

dashwallkick.bsky.social•70 days ago

That's Rooflemonger right now, right after two major news events he can't cover (TGAs, VF Direct)

unicornlashes.bsky.social•70 days ago

This is why I err on the side of caution and report all work emails as a phishing attempt.

scientits.bsky.social•70 days ago

Better safe than sorry

nookrat.bsky.social•70 days ago

Only way to be safe...

ghostyspook.bsky.social•70 days ago

We get fake ones all the time from work that we are supposed to report but one time I wasn’t paying much attention and clicked on and got a ‘this was a fake phishing attempt don’t click links’

orvaloriginal.bsky.social•70 days ago

Same. I was so careful but then one had a subject that was a currently active topic.

s-st.bsky.social•70 days ago

Most work emails DO try to get you to do things you don't really want to do.

unicornlashes.bsky.social•70 days ago

I do genuinely feel like I’m being scammed when I get them.

spacexecadet.bsky.social•70 days ago

🤣😅

frankslartibart.bsky.social•70 days ago

It's the reason why I would never make fun of anyone who got scammed. With so many scams out there, all it takes is one momentary lapse of concentration for one second in one day in one year

swamplizard.bsky.social•70 days ago

“What’s the issue? I was literally told I could not be too careful”

zenvulgarity.bsky.social•70 days ago

Yup and I never have been pissy for the people clicking a highly intricate mimicked DOCUSIGN link of all things

altiam.bsky.social•70 days ago

Digital trust is a fragile treasure these days.

jedleonard.bsky.social•70 days ago

Same exact thing happened to a goofy lil Pokemon YouTuber I know -- Johnstone.

dangrously.bsky.social•70 days ago

They get you with lucrative sponsorship deals...

Thing is, most of the places that advertise through youtubers are dodgy AF. Online gambling, dropshipping, scottish titles, supplements...

caveatruptur.bsky.social•70 days ago

But that's not this. These scammers were all impersonating real people at legit companies like Shure. In the case of this video, he had even recently reached out to Shure so even the communication was plausible.

hauntedchild.bsky.social•69 days ago

Insane that this is how my favorite podcaster and favourite street fighter YouTuber crossover

citizenkryptik.bsky.social•70 days ago

I follow Rooflemonger and I only heard about the whole hack of his channel after the fact, but god, just such a miserable scheme, and I just don't get the point. Such soulless BS.

kcclyburn.bsky.social•70 days ago

This same thing happened to Linus Tech Tips. It’s a known issue that YouTube just kinda shrugs at unless you’re a big enough channel to make a fuss about it.

https://youtu.be/yGXaAWbzl5A?si=kVCA84zp_P3CHKNd

rnelson0.bsky.social•70 days ago

There’s always more than the “just” they describe.

gwen3cfd.bsky.social•70 days ago

I remember this happening to an ASMRtist (Turry) a few years ago, and they were never able to get anything back

soozbee.bsky.social•70 days ago

A lovely soft-spoken woman whose crochet channel I subsribe to had this happen to her, but she managed to get everything restored after a few days.

parisdog.bsky.social•70 days ago

a different scam and different reasons but even Jim browning lost his YT channel for a bit a couple, three years ago.

nestwr.com•70 days ago

It's called a session hijack - been a viable attack on YT for about a decade. Good to know they still haven't fixed it

toothy.dev•70 days ago

You can't. Every website is susceptible to this attack

nestwr.com•70 days ago

you can. If your session keys are per-client like they should be, having the same key get used by a different client should trigger session invalidation. It's baffling that Google hasn't implemented this, given the stuff they've already implemented for security in Chrome

toothy.dev•70 days ago

And how would you differentiate clients?

nestwr.com•70 days ago

ip regions, mac adresses, subnet masks... this is an issue that has been solved by many websites, including banks, Steam, etc

toothy.dev•70 days ago

All not 100% viable. IP region? either too broad to work or breaks dynamic IPs. MAC addresses can change. Subnet masks do too. So unless you wanna log back in every time you move (I'm assuming laptop here but desktops aren't free of it either), you can't properly prevent it

brynstone.bsky.social•70 days ago

"Solved" is strong, as none of these are strong signals by themselves. You may be able to track the impossible traveler problem, but many bigger YT accounts are genuinely managed by multiple people across the globe.

mattstorymusic.bsky.social•70 days ago

OMG, this happened to a channel I subscribed to.

Comments

Posting Rules

Reply