Over 200,000 YouTube creators targeted with fake brand-deal phishing
Security firm CloudSEK documented a campaign in which attackers sent 500 to 1,000 phishing emails per sending account, posing as brands with "collaboration proposals" and "marketing opportunities." Payloads were hosted on trusted platforms such as OneDrive and disguised as contracts and briefs, tailored by channel size and content type.
The lessonThe attachment is the attack. Verify the domain's age and the person's existence before anything opens.
Source: Net Influencer