It's called a YTStealer attack
https://www.forbes.com/sites/daveywinder/2022/06/30/youtube-hacking-warning-as-automated-2fa-bypass-attacks-underway/
Some steps:
- Watch my @vidsummit talk from 2021
- Use a @Yubico to protect your account from 2fa phishing
- use a separate Gmail for your YouTube account
- audit online security (esp connected 3rd party apps) often
https://www.forbes.com/sites/daveywinder/2022/06/30/youtube-hacking-warning-as-automated-2fa-bypass-attacks-underway/
Some steps:
- Watch my @vidsummit talk from 2021
- Use a @Yubico to protect your account from 2fa phishing
- use a separate Gmail for your YouTube account
- audit online security (esp connected 3rd party apps) often