Attackers can use Youtube's redirect functionality to hide their URL. Youtube attempts to mitigate abuse by adding a splash screen which warns the user about the redirection to the external domain.
Command and Control
Youtube has been used as a C&C center by placing commands in the description of the videos and having malware fetch them.