The Linus Tech Tips YouTube channel hack and takeover showed what an attacker could do after stealing session tokens with a fake sponsorship offer, but this report details how a podcast invite and Facebook Live connection is another angle.

The “podcast host” manipulated the hobbyist “guest” into exposing a unique “datasets” URL for their page. Once the scammer had it, they could invite themselves in as a new admin and lock the rightful owners out.