Charles EstherCybercriminals are hijacking popular YouTube and Instagram accounts at an alarming rate, turning trusted content creator platforms into tools for crypto scams, malware distribution, and data theft.
With billions of views and millions of followers at stake, even one deceptive livestream can lead to devastating losses for creators and viewers alike.
Bitdefender Sounds the Alarm on Growing Threat to Social Media Influencers
According to a new report by Bitdefender Labs, account takeover attacks surged in 2024 and continued evolving through early 2025.
Influencers and content creators with large audiences have become prime targets due to their credibility, audience reach, and the high monetization potential of their content.
Hijacked Channels Fuel Malicious Livestreams and Phishing Scams
In 2024 alone, Bitdefender detected over 9,000 malicious livestreams on YouTube.
These streams were often hosted on compromised channels impersonating trusted brands and public figures.
One such hijacked channel had amassed 12.4 billion views before being taken over.
Even if just 1% of viewers were tricked, that could impact 124 million people.
Attackers frequently impersonate brands like Tesla, SpaceX, and Ripple.
They use deepfake videos of celebrities such as Elon Musk or Donald Trump to lure viewers into crypto scams and phishing traps.
Instagram Is Also a Major Target for Hackers and Impersonators
On Instagram, attackers have been posing as Meta or Instagram Support in phishing emails.
They trick creators into giving away SMS verification codes or clicking cloned login links.
This allows hackers to gain full access to accounts and leverage them for further attacks.
Malicious Sponsorships and Fake Ads Are Becoming More Sophisticated
One common tactic is the offer of fake sponsorships.
Scammers send malware-laced files disguised as promotional packages to creators.
Others use malvertising — fake ads for trending tools or games like GTA VI — to install info-stealing software and remote access trojans on devices.
Trending Events Used as Bait to Spread Crypto Fraud
Hackers often wait for global events with high online interest, like Apple keynotes, the XRP-SEC lawsuit, or Counter-Strike 2 tournaments.
They use these moments to launch fake livestreams and scams, posing as official events.
During the 2025 White House Crypto Summit, for example, cybercriminals launched YouTube streams promoting fake crypto airdrops.
Many viewers were tricked into revealing their private information or transferring cryptocurrency to scam wallets.
How Content Creators Can Stay Protected Against Account Takeovers
To protect themselves, creators should follow cybersecurity best practices.
Start by using secure browsers with built-in protections, enabling multi-factor authentication (MFA), and monitoring account activity for any unusual behavior.
Always verify sponsorship deals — especially if they’re tied to trending topics — and avoid downloading files from unknown sources.
Using enterprise-grade DDoS protection can help prevent service disruptions after a hijack attempt.
A reliable proxy service also adds an extra layer of anonymity and protection.
Bitdefender Security Tools Offer 24/7 Protection for Influencers
Bitdefender advises creators to train their teams on current online threats and stay updated with official platform security updates.
Tools like Bitdefender Security for Creators offer continuous protection through features like scam email filters, breach alerts, and step-by-step recovery support.
Conclusion
With cyberattacks becoming more advanced and widespread, influencers and content creators are now on the front lines of digital threats.
As scammers increasingly exploit trending topics and high-profile events, both creators and viewers must remain vigilant and take proactive steps to stay safe in a rapidly evolving online world.
