Google says YouTube creators have been targeted with password-stealing malware in phishing attacks coordinated by financially motivated threat actors. Hack-for-hire actors recruited via job ads on Russian-speaking forums were behind these attacks. Google identified at least 1,011 domains linked to these attacks and roughly 15,000 actor accounts specifically created for this campaign. The malware was used to steal their credentials and browser cookies which allowed the attackers to hijack the victims’ accounts in pass-the-cookie attacks.”]