YouTube Account Hijacking Scam: Fake Inditex Email

Phishing scams targeting YouTubers are becoming increasingly sophisticated. One common scam involves emails that appear to be from well-known brands, such as Inditex, offering promotional collaborations. These scams are designed to hijack social media accounts by deceiving influencers into clicking malicious links or attachments.

How the Scam Works

Scammers send emails posing as legitimate business proposals from recognized brands. In this example, the email claims to be from Inditex, a major European fashion group; However, that is far from the truth. The email was not actually sent by Inditex but scammers instead. The email offers a collaboration opportunity and often includes a link or attachment for more information. When clicked, these links or attachments lead to phishing websites designed to steal login credentials or download malware onto the victim’s device.

Example Email

From: lnditexHR <dhaese.peter1@telenet.be>
Date: Thu, Jul 18, 2:43 AM
Subject: Promoting collaboration in international development

Greetings from the Inditex Group! We are contacting you because we are eager to present the latest additions to our exceptional product line.

Inditex is a top brand in the Inditex Group. It's known for European fashion.

Our affordable clothes will appeal to your audience.

We would love to consider integrating a 25-30 second promo in your media space.

Would you like to know more?

Best regards, Inditex

How Scammers Hijack Accounts

Scammers employ several techniques to hijack accounts. Phishing links in the email direct the victim to a fake login page that mimics YouTube or another social media platform. When the victim enters their credentials, the scammer captures this information. Additionally, malicious attachments, such as PDFs or images, may install malware on the victim’s device. This malware can log keystrokes, capture screenshots, and provide remote access to the scammer. Some scam emails direct the victim to fill out a form requiring sensitive information, such as email passwords or two-factor authentication codes.

Identifying Phishing Scams

To protect yourself from these scams, look for these warning signs:

• Be wary of unexpected collaboration offers from unfamiliar brands.
• Check if the email address matches the official domain of the company. For example, emails sent from “telenet.be” are scams 99.99% of the time, as they are rarely associated with legitimate business communications when it comes to YouTube collaborations.
• Scammers often use urgent language to pressure you into quick action without due diligence.
• Hover over links to check the URL before clicking. Legitimate companies will use their official domains.

Protecting Yourself from Phishing Scams

To safeguard against these scams, always verify the sender’s email address. Official emails from recognized companies will typically come from their domain. Be especially cautious with emails offering YouTube promotions from the “telenet.be” email service provider, as they are almost always scams. Hover over any links to see the actual URL before clicking, ensuring they lead to the official website. Always navigate directly to the company’s website by typing the URL into your browser rather than clicking on links in the email. Additionally, keep your antivirus and anti-malware software up to date to protect against malicious sites.

What to Do If You’ve Fallen Victim

If you suspect you’ve been targeted:

• Cease all communication with the scammer immediately.
• Update your passwords to secure your accounts.
• Report the scam to the relevant authorities and the platform involved.
• Use security software to scan your device for any malware or malicious programs.

Staying Safe Online

Enhance your online security by regularly monitoring your accounts for any suspicious activity. Stay informed about the latest scams and use a password manager to create and store complex, unique passwords. Enable security features like biometric authentication and encryption for added protection.

By staying vigilant and informed, you can protect yourself from phishing scams and ensure your personal information remains secure. Always verify the legitimacy of any unexpected emails and take proactive steps to safeguard your online presence.