June 5, 2024 at 03:16PM High-profile TikTok accounts are being exploited and hijacked in a takeover campaign, with threat actors sending malware-infested direct messages. The malware allows account hijacking without the victim clicking on links or downloading files. TikTok is collaborating with account holders to resolve the issue and prevent future attacks. Notable accounts targeted … Read more
June 5, 2024 at 03:09AM TikTok acknowledged a zero-click account takeover campaign by threat actors, impacting high-profile accounts on the platform. The company has taken preventive measures and is working with affected users. Previous security issues were also highlighted, including a flaw enabling data extraction and a one-click exploit. Concerns about TikTok’s Chinese roots further … Read more
June 4, 2024 at 05:59PM Multiple high-profile TikTok accounts were hijacked by attackers exploiting a zero-day vulnerability in the platform’s direct messages feature. Victims included Sony, CNN, and Paris Hilton. The exploit required targets to open a malicious message, without needing to download a payload or click on embedded links. TikTok is working to restore … Read more