The fact the username and URL do not match and the fact the bullshit videos are both new and old, tells me this is not a mass-delete + mass-upload (YouTube is rated limited anyway) but rather a weird mechanism that redirects or merges the legit account into the attacker's account. So the content is most likely safe.
I don't even think the attackers care about deleting the original content, it doesn't serve them in any way, except maybe if they can extort extra money from the creator by keeping it hostage? Let's not give them ideas.
I'm still very confused about what happened. The crypto videos were all uploaded 9+ months ago, and had at least a few thousand views.
Where's this Youtube or Google merge account function?
> You can't merge or link separate YouTube channels or automatically transfer data from one channel to another. But you can manually re-upload your videos to a different channel that you manage. Watch time and other metrics will start over for any new uploads.
which says: "You can move your channel and its videos over from one Brand Account to another, as long as they’re associated with the same Google Account."
But I don't get how this crypto account got to be on the same Google Account, but maybe you can attach as many Brands as you like to a Google Account?
I can’t imagine what Matthias is going through right now. Hopefully this is reversed cleanly without losing history on the channel.