{"id":17776,"date":"2020-02-19T10:45:04","date_gmt":"2020-02-19T18:45:04","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2020\/02\/19\/news-11509\/"},"modified":"2020-02-19T10:45:04","modified_gmt":"2020-02-19T18:45:04","slug":"news-11509","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2020\/02\/19\/news-11509\/","title":{"rendered":"YouTube Gaming&#8217;s Most-Watched Videos Are Dominated by Scams and Cheats"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.wired.com\/photos\/5e4c3febc37d1a0008ff6887\/master\/pass\/security-feature_art-youtube%20gaming%20cheats-103629800-1058418382.jpg\"\/><\/p>\n<p><strong>Credit to Author: Cecilia D&#8217;Anastasio| Date: Wed, 19 Feb 2020 00:53:15 +0000<\/strong><\/p>\n<p class=\"byline bylines__byline byline--author\" itemprop=\"author\" itemtype=\"http:\/\/schema.org\/Person\"><span itemprop=\"name\"><span class=\"byline__name byline--with-bg\"><a class=\"byline__name-link\" href=\"\/contributor\/cecilia-danastasio\">Cecilia D&#x27;Anastasi<span class=\"link__last-letter-spacing\">o<\/span><\/a><\/span> <\/span><\/p>\n<p class=\"content-header__row content-header__dek\">YouTube is littered with bot-driven videos promising big in-game riches&#8212;that also try to steal your personal information.<\/p>\n<p>YouTube Gaming has been clawing its way into streaming platform Twitch\u2019s market share for months. But new data retrieved by WIRED suggests that YouTube Gaming also has a serious problem with scammers and cheat-makers\u2014and lots and lots of bots.<\/p>\n<p>In January, all seven of the most-watched YouTube Gaming channels weren\u2019t run by happy gamers livestreaming the game <em>du jour<\/em>. They were instead recorded, autoplaying videos advertising videogame cheats and hacks, sometimes attached to sketchy, credential-vacuuming websites, according to one analytics firm. The trend has continued into this month, with five of the top seven most-watched YouTube Gaming channels last weekend advertising cheats.<\/p>\n<p>Take one example: As of this article\u2019s writing, a video featuring a cracking teenage boy\u2019s voice promoting an unconvincing \u201cmoney glitch\u201d in <em>Grand Theft Auto 5<\/em> boasts 11,000 concurrent viewers.<\/p>\n<p>&quot;These networks do a really good job of redirecting and doing a sleight of hand.&quot;<\/p>\n<p>Zack Allen, ZeroFox<\/p>\n<p>\u201cSo basically it\u2019s about glitching Rockstar\u2019s online servers and makes them send out whatever amount of money,\u201d says the voice. The video encourages <em>Grand Theft Auto 5<\/em> players to visit a website called \u201cPerfect Glitches,\u201d type in their gamer tag and the amount of in-game money they want\u2014up to $9,999,999,999 a day\u2014and hit \u201cgenerate.\u201d But, ho\u2014the user must first prove that they are human by filling in their personal information on two other websites.<\/p>\n<p>A chat box alongside the video displays frustrated messages: \u201cI still haven\u2019t got the money,\u201d or \u201cI did all the steps.\u201d The stream, which often sits atop YouTube Gaming\u2019s directory, remained live last weekend for over 21 hours, during which it was viewed over 1.1 million times. Today, it has been live for nine hours.<\/p>\n<p>The account behind the video, Queen PSH, has been active since October 2016, and appears to engage in a common form of scamming, says Zack Allen, director of threat intelligence at security firm ZeroFox. After you fill in your personal information\u2014anything from your address to your credit card number\u2014these types of sites will often turn around and sell it. Other times, sites that promise cheats or in-game money will download malware onto your computer. Perusing the site Queen PSH links to, Allen discovered that it is connected to a network of 18 other websites, including other cheating and porn sites.<\/p>\n<p>\u201cThese networks do a really good job of redirecting and doing a sleight of hand,\u201d says Allen.<\/p>\n<p>While several YouTube Gaming cheat channels have disappeared since January, a couple of long-time users remain and many more keep cropping up. One particularly psychedelic channel features a 3-D cat in a Russian hat advertising free in-game money, against a background of gaudy Russian text and a scrolling chat box. Stitch from <em>Lilo and Stitch<\/em> dances on the top left corner. With 10,000 live concurrent viewers as of this article&#x27;s writing, the video buoys the whole category for a somewhat niche shooter game called <em>Standoff 2<\/em>.<\/p>\n<p>It\u2019s unlikely that the bulk of those eyebrow-raising view numbers are real humans watching this stuff. Instead, scammers drive bot traffic to them to push the videos to the top of YouTube Gaming directories, where they can get the most exposure for the longest period of time\u2013a better position from which to dupe unlucky viewers. \u201cYou can think of it as an underground platform economy where people can buy clout and direct traffic to these videos,\u201d says Allen.<\/p>\n<p>Although none of the top cheat channels\u2019 owners responded to WIRED\u2019s requests for comment, their high number of concurrent viewers\u2014an average of about 11,600 from the weekend\u2019s top five, according to Stream Hatchet data\u2014compared to their low frequency of live chatters and new subscribers indicates the likelihood of bots. One video advertising a hack in the game <em>Escape From Tarkov<\/em> has 11,615 live videos as of this article\u2019s writing, while only 1,440 people subscribe to the channel. Another advertises cheats in <em>PlayerUnknown\u2019s Battlegrounds<\/em> on mobile with 9,360 live viewers and only 1,600 subscribers.<\/p>\n<p>Other channels amass popularity by integrating viewer numbers into their scams. One channel advertising free money in the children\u2019s game <em>Roblox<\/em> stipulates that players must subscribe and like the YouTube Gaming stream and \u201cstay this stream 24\/7\u201d to get their free cash.<\/p>\n<p>YouTube\u2019s scammer problem threatens to put a damper on its broader gaming ambitions. Over the last year, YouTube Gaming has <a href=\"https:\/\/www.wired.com\/story\/activision-esports-leagues-youtube-exclusive\/\">absorbed<\/a> some of Twitch\u2019s biggest streamers and esports channels, including <a href=\"https:\/\/www.wired.com\/story\/activision-esports-leagues-youtube-exclusive\/\">all of Activision Blizzard\u2019s esports leagues<\/a>: <em>Call of Duty<\/em>, <em>Overwatch<\/em> and <em>Hearthstone<\/em>. As the platform eats up more and more of Twitch\u2019s pie, it competes with Twitch in the critical metric of \u201chours watched.\u201d Twitch earned  842.5 million hours last month to YouTube Gaming\u2019s 358.3 million\u2014up from 287.4 million last year, according to analytics firm Arsenal.gg.<\/p>\n<p>But data shared with WIRED from Arsenal.gg and Stream Hatchet indicates that at least some portion of those YouTube Gaming hours may come from channels advertising cheats, free video game money, or straight-up scams. Data from those firms shows that somewhere between 39.8 and 47.4 million YouTube Gaming hours watched in January were from seven top channels broadcasting unsavory software or services in online games. Scammers that the analytics firm flag don&#x27;t count toward YouTube Gaming&#x27;s overall numbers, but an unknown amount slips through.<\/p>\n<p>\u201cWe are committed to making YouTube the premier destination for high-quality gaming content and are actively investigating the matter,\u201d YouTube said in a statement to WIRED.<\/p>\n<p>YouTube has struggled to moderate gaming scams for years. In 2018, videos advertising free in-game <em>Fortnite<\/em> money <a href=\"https:\/\/www.wired.com\/story\/fortnite-scams-even-worse-than-you-thought\/\">plagued the platform<\/a>. At the time, ZeroFox published a report describing how <a class=\"external-link\" data-event-click=\"{&quot;element&quot;:&quot;ExternalLink&quot;,&quot;outgoingURL&quot;:&quot;https:\/\/www.zerofox.com\/blog\/zerofox-finds-fortnite-scams\/&quot;}\" href=\"https:\/\/www.zerofox.com\/blog\/zerofox-finds-fortnite-scams\/\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">they discovered<\/a> over 1,390 videos with a combined millions of views that encourage users to share information in exchange for free <em>Fortnite<\/em> V-bucks.<\/p>\n<p>\u201cBotted channels have been around since streaming platforms have been created,\u201d says Stream Hatchet CFO Jake Phillips. \u201cHowever, the recent surge in botted channels may be due to the increased attention of the \u2018Platform Wars\u2019 as people try to climb to the top to steal \u2018imposter market share\u2019\u2014viewership outside of the regular market share since it is being bought or faked.\u201d<\/p>\n<p>Neither Stream Hatchet nor Arsenal.gg (through StreamElements, which publishes their data) typically include cheat channels in their published data about the top YouTube Gaming channels. Schneider says that he doesn\u2019t believe it\u2019s fair to compare legitimate channels\u2019 data to the potentially falsified viewership data. Arsenal.gg did not respond to WIRED\u2019s request for comment by press time.<\/p>\n<p>The prevalence of these game-cheating YouTube Gaming channels with what appears to be huge numbers of bots complicates the narrative of the so-called \u201cplatform wars\u201d between Twitch, YouTube Gaming, Mixer, and Facebook Gaming. While Twitch\u2019s livestream directory might have a couple <a href=\"https:\/\/www.wired.com\/story\/twitch-sports-piracy-streaming\/\">pirated sports streams<\/a> or <a class=\"external-link\" data-event-click=\"{&quot;element&quot;:&quot;ExternalLink&quot;,&quot;outgoingURL&quot;:&quot;https:\/\/kotaku.com\/twitch-is-overrun-with-suspicious-casino-channels-1829823144&quot;}\" href=\"https:\/\/kotaku.com\/twitch-is-overrun-with-suspicious-casino-channels-1829823144\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">sketchy gambling streams<\/a>, its top ranks aren\u2019t nearly as dominated by ads for cheats.  If a chunk of YouTube Gaming\u2019s hours watched is due to this sort of behavior, then it may be a little longer until Twitch is knocked off its throne.<\/p>\n<p><a href=\"https:\/\/www.wired.com\/story\/youtube-gaming-scams-cheats-livestreams\" target=\"bwo\" >https:\/\/www.wired.com\/category\/security\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.wired.com\/photos\/5e4c3febc37d1a0008ff6887\/master\/pass\/security-feature_art-youtube%20gaming%20cheats-103629800-1058418382.jpg\"\/><\/p>\n<p><strong>Credit to Author: Cecilia D&#8217;Anastasio| Date: Wed, 19 Feb 2020 00:53:15 +0000<\/strong><\/p>\n<p>YouTube is littered with bot-driven videos promising big in-game riches\u2014that also try to steal your personal information.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10378,10607],"tags":[714,21357],"class_list":["post-17776","post","type-post","status-publish","format-standard","hentry","category-security","category-wired","tag-security","tag-security-security-news"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/17776","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=17776"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/17776\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=17776"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=17776"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=17776"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}