Fake Amazon Music × YouTube deal phished creators' Google logins

What happened

Malwarebytes found a website, amazonyt[.]com, posing as an "Amazon Music and YouTube partnership". It asks creators for their channel link and pulls their real channel data through 20 rotating Google API keys so the offer looks genuine.

The "Continue with Google" button opens a nearly transparent frame that sends your email and password to the attacker.

What was found

The fake login frame is served from a second domain, youtubechannelverification[.]com, and also handles the multi-factor authentication step, capturing the codes. The page is available in nine languages.

Data at risk

• Google account email
• Password
• 2FA codes
• YouTube channel

What you should do

1. 1Check any partnership offer inside the platform's own dashboard; do not follow links in emails or direct messages.
2. 2When signing in to Google, make sure the address bar shows accounts.google.com.
3. 3Turn on passkeys or a hardware security key.