Influencer Phishing

This report documents two closely related phishing clusters identified by the urlscan Threat Research Team, both targeting social media users, primarily YouTube content creators, with the goal of gaining access to Google accounts. Both clusters employ a multi-stage phishing flow, beginning with a YouTube-themed lure and culminating in a highly engineered Browser-in-the-Browser (BitB) technique designed to convincingly impersonate the Google sign-in experience. Notable findings include a victim-selection mechanism based on subscriber count and a sophisticated credential-harvesting flow capable