AI-generated deepfake video of YouTube CEO used in phishing attacks on creators
Scammers have used AI-generated deepfake video impersonating YouTube CEO Neal Mohan to conduct phishing attacks targeting content creators. The video, shared privately and claiming to announce monetization policy changes, directs victims to click malicious links or download files to steal credentials and install malware. YouTube issued an official warning that it never communicates via private videos and instructed creators to report such scams.
What happened
Scammers created a deepfake video using AI technology to impersonate YouTube CEO Neal Mohan, mimicking his appearance, voice, and mannerisms.
The video was shared privately with YouTube creators in emails claiming to come from YouTube, featuring a fabricated announcement about changes to the platform's monetization policies.
The fraudulent video directed creators to click on links, enter login credentials on fake websites, or download software from untrusted sources to maintain their payment eligibility.
Reported impact
YouTube stated that scammers have been sharing these private videos to steal creator credentials and install malware on their devices.
Once attackers compromised a user's account, they could access the creator's YouTube channel for spreading misinformation, conducting further phishing attacks, or engaging in fraudulent activities.
Index analysis
The attack targeted YouTube content creators specifically, as they have large followings and depend heavily on the platform for income, making them more likely to fall for deception.
The deepfake video demonstrated a high degree of sophistication in mimicking the CEO's likeness, voice, and mannerisms to increase credibility.
Governance controls
YouTube issued an official warning to its creator community, explicitly stating that YouTube and its employees will never share important information or contact users through private videos.
YouTube instructed creators to treat any private video claiming to be from YouTube as a phishing scam and not to click links in such videos, and directed users to report such videos through YouTube's reporting mechanism.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.