The YouTube channel Linus Tech Tips and two additional channels belong to Linus Media Group. The hacker could livestream crypto scam videos, modify channel names, and erase videos. The owner, Linus Sebastian, revealed in a new video that the hack could bypass the password and two-factor authentication measures. Because hackers targeted session tokens, which are used to keep users logged in to websites.
Introduction To Tech Tips:
Sebastian said that a member of the Linus Media Group’s team have downloaded a document. This document is deemed to be a sponsorship proposal from a potential partner. When they open the PDF file, the malware becomes active which now can activate the bad actor. This actor will obtain all user data from the team’s installed web browsers, including session tokens. This will allow the hacker to create an exact duplicate of the browser. After that, they can use them to cause damage without having to enter any security credentials.
Linus Tech Tips, TechLinked, and Techquickie have all been restored. But, Sebastian has suggested some changes that YouTube should implement to prevent similar breaches from occurring in the future. He proposes enhanced security measures for specific channel attributes. Currently, it is possible to change the channel name without needing a password or two-factor authentication. Sebastian also recommends that YouTube implement some form of confirmation or verification process if someone attempts to mass-delete videos.
YouTube spokesperson Elena Hernandez stated that their team investigated the issue and collaborated with Linus Tech Tips to secure and restore their account after being alerted to unauthorized access. When asked if the company will introduce changes to address breaches like this, no response has been provided yet.
Recently, there has been a rise in takeovers of YouTube channels like this, and implementing changes like Sebastian’s recommendations could help prevent them from happening again. I advise watching Sebastian’s complete video explanation, which provides additional information about the situation. However, it is worth noting that the video includes security footage of Sebastian in his home (with his nudity blurred), as he attempts to investigate the issue.
Also Read: Instagram updates: Instagram to make Reels re-sharing more accessible