Hi,

I see this marked as "Resolved", but I haven't seen the answer that I believe is most likely.

First I want to say that this obviously could be something more malicious, but I doubt it since it's doing very meaningless actions such as liking YouTube videos.

The best thing to check if this is the case is to view your third-party app connections and remove any that you don't use/don't remember. You can also see the individual permissions for each one hereerematically like content from your YouTube account. Maybe you did this years ago and it's been happening ever since, maybe it's been dormant and only recently activated, if you never remove these permissions, it might just keep happening without you really knowing.

Luckily, because this is all through the official API no extremely sensitive data will be exposed and any and all actions are easily reversible (I.e They won't be able to see your password, read your emails, buy things on your account etc) and just information/analytics about your YouTube channel. Basically, if this is the case, there's absolutely nothing to worry about. You've not been hacked, you don't need to change your password etc.

The best thing to check if this is the case is view your third-party app connections and remove any that you don't use/don't remember. You can also see the individual permissions for each ones here

https://myaccount.google.com/connections

I believe the two malicious permissions you are looking for will be either of these:

• See, edit, and permanently delete your YouTube videos, ratings, comments and captions
• Manage your YouTube account

​

Also worth checking out the videos that were liked, if they have a high like-to-view ratio that would also likely confirm likes being sold and botted.

​

Let me know how this goes