This phishing campaign is so convincing that even savvy YouTubers may be duped into giving crooks control of their accounts.