They tried to Hack my YouTube Channel!

My experience with the same channel hacking malware that hacked LinusTechTips.
--------------------------------------------------------------------------------------------------------
Links:
VirusTotal: www.virustotal.com/gui/home/u...
Hybrid Analysis: www.hybrid-analysis.com/
HxD (Hex Editor): mh-nexus.de/en/downloads.php?...
de4dot: github.com/de4dot/de4dot
dnSpy: github.com/dnSpy/dnSpy/releases
--------------------------------------------------------------------------------------------------------
Timestamps:
0:00 - Intro
1:27 - Suspicious Emails
5:17 - Investigating the Malware
14:57 - How to Protect Yourself
--------------------------------------------------------------------------------------------------------
Music
Outro: Paul Flint - Sock It To Them - • Paul Flint - Sock It T...
--------------------------------------------------------------------------------------------------------
Find my content on these other platforms:
Odysee: odysee.com/@MODDEDWARFARE
LBRY: lbry.tv/@MODDEDWARFARE
BitChute: www.bitchute.com/channel/cZkN...

[@MODDEDWARFARE]

As pointed out in the comments just checking the email domain isn't sufficient due to email spoofing. So always reach out to the company directly to confirm things and always be suspicious of any files they want you to download.

[@bakihanma4826]

Thank you for covering this kind of subject

[@bakihanma4826]

I blocked this channel

[@utsavpradhan2754]

Hey Modded warfare i have a geniune question Is there a way to partition an external harddrive so that half space can be used for ps4 and half can be used for pc. Can we do that in a jailbroken ps4?

[@masterrudi]

Nice re-engineering!! Really interesting!

[@remusracingro3884]

Great video

[@ARG]

This is crazy and thanks for the deep dive into what the virus is doing, great content as always bro !

[@justanotherpxrson]

This was easily the most helpful video that was made about this scam yet. Thanks! I didn't know about the obfuscation stuff, super useful info.

[@upperboundaries]

Nice educational video. I would like to see more of these videos besides the PlayStation videos. Keep up the good work. Ps. You PS videos have helped me a lot with jailbreaking my PS4 .

[@Shirwatel]

phew so glad you were aware of such things as most people who are growing their channels and receive these email for the first time they don't know much of how these scams work and get their channels stolen! thanks for spreading the knowledge & be safe everyone!

[@giuliosancin7201]

fan-tas-stic! You are great at showing, informing and explaining all the various possibilities and outcomes. I am amazed by your skill.

[@Cgaras]

Best "disassembly" presentation I've ever seen! You made it simple enough for us noobs to understand what damage may an "innocent" file do! Well done mate! Greetings from Greece!

[@touma-san91]

I wish you had mentioned that email spoofing is a thing too, so checking the email address is not always a proper solution

[@MODDEDWARFARE]

Fair point. Contacting the company directly is the way to go to be sure the email is legitimate.

[@r4dius]

And it's detected as spam

[@touma-san91]

@@r4dius Not always. There is so many ways to go around those spam filters that it's not even funny. Even Google lot of the time fails to detect these properly.

[@ardaerdurak758]

I'm glad that nothing happened to your channel, I hope you never experience that again

[@paulnewhouse5126]

Great video, thanks for the in depth look!

[@jin3513]

we are with u no matter what.. u are legendary.

[@mihaimiu5817]

Great video, thank you for the information/tutorial presented here

[@douglasluciano3]

Thanks for sharing that info with us! I also have a question about it, I have seen your video witch you describe how to repack a pacth with a different signature of your gane base (Horizon Zero Down was the game example), and one of your download link got detected as a trojan by my OS, should I worry about it??

[@Robbo705]

Smashed it out the park , gd work , keep it up

[@Nvmindl]

Thanks for taking the time to share awareness about malware helpful stuff as always

[@BenchongDy]

This is how you make an awareness video. Good explanations, no extenders.

[@hfric]

this is level 1 basic stuff of pentesting and getting info ... level 2 attacks are embedding Gif or JPG into the e-mail that is read by your browser... and by simply opening the mail it reads the cookies or your browser... and then depacks in your cache folder of your browser...

[@2playOrig]

It's always nice to see experts educating ppp

[@coxsackievirus8192]

you are awesome dude . keep up the good work

[@DaveMrTurtles]

I never leave a comment, but this was quite the information. Thanks for this knowledge!

[@MedoReo]

👏👏👏 Great analysis I really enjoyed it

[@anonamous4782]

Good looking out buddy thanks 4 the tuts

[@abubakarshinaka]

Thanks for the update 👍🏻👍🏻

[@OQTIZZLE_ORLANDO]

Nice. Thank you. I am using this info.

[@cientifiqus]

Hello, so if that relays on exe kind of files, you shlud be safe on non windows based OS?

[@Buiral]

Can’t believe they’d attack you your the lord of modding

[@g.techno3325]

Don't worry modded we will support you ..just make another channel and we gonna be there😎

[@gospelachuenu8873]

Wait a contract paper that is 700MB 💀💀 how long are the pages??

[@MR.MACH1NE]

very informative..thanks

[@ShadowMax2K]

Really wish you all the best and never face such issues.

[@Cretaker]

What a chad for releasing this video. Modded Chadfare.

[@jonyellis]

Great work and a great video as usual from you, man. Really interesting stuff. I've never been that interested in Linus Tech Tips, there's too much ego and not enough genuine expertise. This is a good example of why I hold that opinion - along with Linus dropping blobs of thermal compound into a CPU socket...

[@thinktech2go]

Very informative, this will save someone.

[@mutatedgenome]

Great info. Thanks.

[@wittherandrade6961]

Well Atleast you outsmarted them bro

[@lilmancc35]

You see, this would never have got me, because after i read the "how to" portion of this hack, id literally say something like "this is to much work for a sponsor" and carry on, even though, like mentioned, they have you do simular stuff any way.

[@rand0mGT]

lol

[@cientifiqus]

Hello, as a security messure you should have a separe device to access critical bissenes applications as youtube channel account and another to access other staff.

[@chikaubah9687]

What response did you get from the original website

[@DevilSnake2009]

The music at 12:00 is called book the rental wit it

[@Jacob-WD40]

Modded Warfare: You should never be at this point or open malware. Also Modded Warfare: So I'm gonna open this malware. XD Thanks for the warning and excellent explanation.

[@musicalboy9122]

Love the video! Where are you from? I mean which country? Asian country?

[@loneandaloof]

Scotland.

[@ZDEyE]

Question: what if I download it, how can I safely remove it from my system afterwords? Will deleting the files and everything with it be sufficient or is there anything else that needs to be done?

[@ricedanan]

So long as you don't run the software you should be fine. If it's still in the ZIP/7z archive you are 100% safe.

[@ZDEyE]

@@ricedanan I already got hacked before. So how can I get rid of it now?

[@wittherandrade6961]

Since your into stuff like this you would probably know why a question I hade, so the other day I downloaded resdident evil 4 for free and I added it to my Package downloaders and stuff perfectly but the next day I got a call from My Wi-Fi company saying that I’m using black web Links and that they can cancel my Account if seen again, any way to bypass that?

[@lockoffme]

bro this video is very educational.

[@-someone-.]

This is a very useful video. Everyone needs to know how to protect themselves. 👍

[@EdgardR.]

Very interesting video

[@Snjeguzica]

I've been wanting to get into virtual machines but idk what's a good software to use. The only one I ever used was oracle VM virtualbox for some stuff in college, but because it was recommended to me by boomers I cant help but think there might be something more modern or better to use. Any recommendations would be appreciated.

[@touma-san91]

Virtualbox is basically your only good free option still to this day. VMWare would be your paid option.. There is probably some other options too but Virtualbox and VMWare tend to be easiest to find support for too Edit: Linux obviously also has QEMU.. And Windows has HyperV but those are not good options for someone who wants to just mess with VM's.

[@kimisha19]

VirtualBox works great tbh. Just enable virtualization in your BIOS and you're good to go.

[@MODDEDWARFARE]

VirtualBox works well if you remember to install the extension pack. VMware player for Windows is another simple solution.

[@Bobby8451]

I'm always looking out for suspicious, sketchy bs like this.

[@joseorbe4867]

No way!! Keep safe MW

[@jjss3055]

It was kinda of dumb of them to target Linus and succeed. Now all the other channels are on high alert and more careful, making it more difficult to succeed in future attacks lol.

[@Ashurman666]

Channels SHOULD have been on high alert for years now, this is not the first time a big channel is hacked to stream crypto shit.

[@MODDEDWARFARE]

True, maybe now KZbin will take action.

[@Somanybeats]

You're really smart dude

[@tarungupta2001]

I learned a lot from this video.

[@Danjovisagat]

You taught us to use a hex editor if a file seems unusually large.

[@UmarAbid]

The email is also not from norad VPN it would have their domain name in their also this does not.

[@6reen6uy]

What can KZbin do to stop you from clicking a bad link?

[@MODDEDWARFARE]

The problem with KZbin is that the session doesn't expire for a really long time and they don't require you to re-enter your password/2FA when deleting a lot of videos or changing your channel name. Simple things like this would help minimize the impact of the hack .

[@David_Austin]

I've been a victim of these scams twice now and It takes them all of a few minutes to hack your account, And takes you about a week to gain control of my channel again well at least in my case it did I'm sure bigger channels like Linus Tech Tips got there channel back sooner but it's huge problem KZbin need to sort out.

[@MODDEDWARFARE]

I agree it's been going on for well over a year and yet I've seen no action from KZbin.

[@rjm006]

Carefull! Don't wanna lose the MODDED WARFARE 🎮

[@dayrom330]

👍

[@chrischris6399]

Please share some latest news on switch and rp2040 mod , thanks

[@ted2j]

wow just wow thank you soooo much

[@vang2574]

I download the files and accidently run it, what do I do?

[@Danjovisagat]

Nuke your system, change your passwords via another device thats not compromised.

[@josephcronin2965]

I was also immediately sketchy of it being 700mb

[@xXMasterJ360Xx]

People in the comments: "So when is the new PS4 jailbreak?" Me: "Just install unusual software on your computer first"

[@vescoellis5980]

We got your back modded warfare we are watching these so called hackers.

[@thn4296]

My steam got hacked recently idk wtf is going on

[@ReaperHackz]

These scammers really taking peoples login tokens it is so sad people do this to others and dont care at all smh. like smaller channels that this happens to prob dont even get help or ever get it fixed like come on YT...

[@alejandromaya-villa984]

hacker gets a taste of his own medicine

[@rand0mGT]

This happens in discord too. Be careful of randomly joining discord servers

[@randomriddle539]

i have switched to macOS becasue of this nuisance, info stealers, session hijackers, cookies stealers r very very dangerous

[@lenoirx]

MacOS is still vulnerable to cookie hijacking or hacking in general.

[@XeSnows]

@@lenoirx anything besides from consoles i think are vulnerable to hijacking and hacking

[@KraziestKrazy]

👳‍♂️: Samir quick write this down!!!!

[@thesmashtvnetwork]

not true thear or anti virus that can scan pass word file but you need the pass word

[@DanRiley]

Yes I was a victim of this 😢

[@rollaluzay3279]

It happened to me twice

[@OrinSorinson]

LOL I guess I'd have a burner virtual machine or a live linux for things like this. Aaaand that's exactly what you did. Windows would benefit from some elegant and easy to use virtualization and extreme sandboxing for stuff like this.

[@touma-san91]

Windows does have sandbox, it's just not a well known feature and kinda pain in the ass as it basically resets everything everytime you reboot the sandbox

[@OrinSorinson]

@@touma-san91 On Pro and Enterprise. I've messed with it a few years ago and it was decent but not something I'd see most people use. I personally stayed with other VMs for compatibility and permanence/clones.

[@enes451]

This one is the nicest video of your channel, should start an programmig Tutorial channel maybe on how to crack denuvo. Thumbs up ;)

[@id104335409]

Can't you all just band together and track them down? We know KZbin is not going to do anything about it.

[@TomJones-wi4nh]

The first any only clue you’d need to red flag the email as a scam are the wonky way some of the sentences are worded. The email was obviously written by someone whose first language isn’t English.

[@pholly]

I knew these things were happening because of idiots, how this still happens in 2023 is amazing to me. This is a great video, very informative and should be shared with as many people as possible so normies are scared into avoiding clicking on stuff in emails.

[@touma-san91]

I think more amazing is that KZbin still doesn't have a proper way to put a stop to this even though the recipe is pretty much the same always.. Channel gets renamed to Tesla or SpaceX, livestream starts that involves crypto or NFT's with Elon Musk.. You would think it would be fairly easy to write an algorhitm to track these types of things. It could be very easily automated to the point where they would just have to deal with few false positives

[@pimplyface64]

How to spot a scammer = find Grammer mistakes.

[@Ex_VMS]

you can be logged on discord just my clicking on a imagine , clicking links or even joining some discord servers

[@ScorpionX3]

If u click on a link or installing a app is it not hacking u give him access to you PC 🤦🏿‍♂️

[@ltraltier6009]

Glowies at work again

[@akahee22]

Imagine typing all this to steal someones KZbin 😐🤣🔥

[@fku89]

you should create an other youtube channel for this kind of explanations,

[@masud2582]

They choose wrong guy

[@nannychris6423]

They contact the wrong person i think😂😂

[@NON155]

YEAH ONLY BIG KZbinR CARE ABOUT SPONSOR MONEY... BUT AM A TINY HALF KZbinR . I CALLED IT UNFAIR..

[@ivofernado9218]

cara hackiaram seu canal adoro seu canal sempre trazendo novidade na cena ps3 ps4 ps5 cara tomara que resolva logo isso e foda caras copiando canais dos outros

[@venom3214]

Thankyou for this information

[@Harmonic14]

If this scam is similar to the ones that have gotten bigger KZbin channels in the past year or so, I'm honestly baffled that those channels fell for it

[@emmanuelluna5880]

Russians* (que Indiana Jones music)

[@XAlucardmoonX]

That's not cool 😮

[@wittherandrade6961]

Dark web links*^

[@paulredpath692]

do you think the hacker would offer you a cuppa for exploiting his/her exploits lol

[@Endoe.McKronic]

So everyone on KZbin saying their sponsor is NordVPN? Got scammed? LoL

[@consolenichecsn6930]

Wow

[@SyutoMC]

Ok

[@ukaszrugaa104]

April fools 😊

[@Ashurman666]

That was yesterday

[@MachiavelIian]

people really fall for this? damn lol

[@Ex_VMS]

u mean ratting / logging