How to Protect Yourself from YouTube Phishing?
It's a good rule of thumb that you don’t click links in anything that might be a fake message. Also, do not enter your login credential into login pages that aren't verified as a part of the real website. If you have to login to YouTube, manually type the URL address of youtube.com into the browser’s address bar. If you are using several of Google’s services such as YouTube, Gmail or Google Adsense and Google Analytics, do not use the same password for all the services. Google has been prompting YouTube users to link their YouTube account with the larger Google service, which means you will now have to control more accounts by regularly changing the passwords for each service.
If your YouTube account is hacked, verify that the e-mail address associated with YouTube account is still yours and then change your email address password. Proceed to regain control of your YouTube account by requesting a password change via https://www.google.com/accounts/ForgotPasswd?service=youtube
Configure YouTube settings by changing the default settings to your preferred and secure preferences.
In addition to antivirus protection, use a spam filter to prevent even receiving malicious or spoofed emails. You also need to enable the fraud and malware protection in your browser. Replace the default hosts file in Windows by using hpHosts or MVPS Hosts files. Use a browser add-on such as Web of Trust, McAfee SiteAdvisor or AVG LinkScanner that will block or warn you of malicious or phished YouTube pages.
If you are using firewall software such as Outpost Firewall Pro, the paid edition of Online Armor and Kaspersky Internet Security or PURE, you can take advantage of using their Blocklist feature that will block connections to known malicious URL and IP addresses. Screenshots below show redirections by fake pages to fake scanner websites being blocked: