Phishing Campaign Targets Popular TikTok Accounts

Security researchers have uncovered a phishing operation targeting high-profile TikTok accounts owned by influencers, brand consultants, production studios and influencer managers.

In the first case, actors impersonate TikTok employees, who threatened the recipient with the immediate removal of his account after an alleged violation of the platform’s rules.

Another strategy is to offer a ‘Verified’ badge that gives credibility and authenticity to the account. As many people are interested in getting the badge, this strategy evidently seems to be very sweet bait.

In both cases, the attackers provide an embedded link at the end of the statement.

As soon as they click on the link, they are forwarded to a WhatsApp chat room where they meet a fraudster posing as a TikTok employee.

The scammer then asks for their email address, phone number and a one-time code required to bypass multifactor authentication and reset the account password.

According to the researchers, the phishing attack aims to either take over an attack or force account holders to pay a ransom to get their accounts back.

IT World Canada Staff
IT World Canada Staff
The online resource for Canadian Information Technology professionals.

Would you recommend this article?


Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.

Jim Love, Chief Content Officer, IT World Canada

Featured Download

ITW in your inbox

Our experienced team of journalists and bloggers bring you engaging in-depth interviews, videos and content targeted to IT professionals and line-of-business executives.

More Best of The Web