A convincing “creator portal” uses your own YouTube videos and viewing figures to steal your Google login.