Hijacking Scheme Takes Over High-Profile TikTok Accounts
Hijacking malware gets spread through TikTok's direct messaging and doesn't require the victim to click links or download anything.
![A person's hand in front of a turquoise background, holding a phone with the TikTok logo on the screen A person's hand in front of a turquoise background, holding a phone with the TikTok logo on the screen](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt84d3e86b58f2f3b7/6660b0e57d27ee2de35bd215/tiktok(1800)_Anatolii_Babii_alamy.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
The social media platform TikTok has confirmed that high-profile accounts are being exploited and hijacked by threat actors in a takeover campaign.
The threat was first discovered by Forbes on June 4, which revealed that users had received direct messages believed to contain a strain of malware that is being spread by the threat actors. The malware reportedly allows the hijackers to take over an account without the targeted victim even having to click on a link or download a file.
Though it's publicly unknown how many of these high-profile accounts have been targeted or what kind of malware is being used, TikTok is working with these account holders to address the issue.
"Our security team is aware of a potential exploit targeting a number of high-profile accounts. We have taken measures to stop this attack and prevent it from happening in the future," a TikTok spokesperson stated.
As for now, Forbes and Semafor have confirmed that the CNN TikTok account has been taken over and that the accounts for Sony and American media personality Paris Hilton have been targeted.
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024