Google’s Threat Analysis Group (TAG) attributes the attacks to a group of hackers recruited in a Russian-speaking forum, who sell the hacked YouTube channels to the highest bidder.