"Free" game cheats, cracked software, and crypto trading bots on YouTube often hide malware. Here's how these lures work, the red flags to watch for, what to do if you already clicked, and how I cut off nearly 800 of them this week.

A DocuSign phishing email from a real insurance agent's hacked account fooled me, an IT professional with 30+ years of experience. Two-factor authentication saved my account. Then I traced the attacker to 188 domains across four countries.