I wanted to share a heads-up about a highly sophisticated phishing attempt targeting content creators and tech channels recently.
I received an email claiming to be from an agency called Kolect / Link Ventures, representing the well-known 3D printer brand Creality for a YouTube video integration. The email was written in clean Turkish, included formal signatures, addresses, and even a standard follow-up email—making it look completely legitimate at first glance.
The mail is: [email protected]
After checking with official channels, it was confirmed that this is 100% a scam.
How This Phishing Scam Works:
I received an email claiming to be from an agency called Kolect / Link Ventures, representing the well-known 3D printer brand Creality for a YouTube video integration. The email was written in clean Turkish, included formal signatures, addresses, and even a standard follow-up email—making it look completely legitimate at first glance.
The mail is: [email protected]
After checking with official channels, it was confirmed that this is 100% a scam.
How This Phishing Scam Works:
- The Bait: They reach out asking for your sponsorship rates and integration budget to build initial trust.
- The Trap: Once you reply, they send a "contract," "media kit," or "product specification document" via password-protected .zip files, .exe attachments, or suspicious Drive links.
- The Goal: Opening these files deploys session-stealing malware to compromise your browser cookies, giving them full access to your YouTube channels, social media accounts, and email.
- The email comes from an unverified domain (kolectcreator.com) rather than an official brand or verified agency domain.
- Automated phishing scripts often insert incorrect names in the opening greeting (e.g., addressing the recipient by a different name).
- Follow-up emails claiming "your candidacy will close in 3 days" are designed to create panic so you act quickly without verifying.
- Always double-check the sender's exact email domain before responding to outreach emails.
- Never download or execute .exe, .scr, or password-protected .zip files sent under the guise of "contracts" or "briefs."
- If anything feels off, contact the brand directly through their official website to verify the offer.
- Mark these emails as spam/phishing immediately and do not reply.