Phishing Campaign Targets Popular TikTok Accounts

Share post:

Security researchers have uncovered a phishing operation targeting high-profile TikTok accounts owned by influencers, brand consultants, production studios and influencer managers.

In the first case, actors impersonate TikTok employees, who threatened the recipient with the immediate removal of his account after an alleged violation of the platform’s rules.

Another strategy is to offer a ‘Verified’ badge that gives credibility and authenticity to the account. As many people are interested in getting the badge, this strategy evidently seems to be very sweet bait.

In both cases, the attackers provide an embedded link at the end of the statement.

As soon as they click on the link, they are forwarded to a WhatsApp chat room where they meet a fraudster posing as a TikTok employee.

The scammer then asks for their email address, phone number and a one-time code required to bypass multifactor authentication and reset the account password.

According to the researchers, the phishing attack aims to either take over an attack or force account holders to pay a ransom to get their accounts back.

For more information, read the original story in BleepingComputer.



Related articles

Microsoft announces enhanced security feature for OneNote

Microsoft has released further information on the increased security measures it is deploying for OneNote in order to...

Russian hacker group steals Emails of NATO officials and diplomats

Since February 2023, a Russian hacking gang known as TA473 or 'Winter Vivern' has targeted unpatched Zimbra endpoints...

Canadian cybersecurity accelerator counts its accomplishments

A Canadian university-associated business accelerator for helping early-stage cybersecurity companies says its first two years of operation have been more than satisfactory. The Rogers Cybersecure Catalyst Accelerator has had “an incredible impact” on Canadian cybersecurity entrepreneurs and founders, executive director Charles Finlay said this week in the first report on the program’s progress. Despite having

Crackdown on ransomware gangs yet to show an impact: OpenText

In its annual cybersecurity report OpenText also looked at malware, phishing and infec

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways