Google has shed light on a spate of attacks that turned creator channels into cryptocurrency scam livestreams.