AitM Phishing Campaign Targets TikTok Business Accounts

Threat actors are conducting an adversary-in-the-middle (AitM) phishing campaign targeting TikTok Business accounts, as reported by Push Security. The attack leverages phishing pages to hijack accounts, which are then exploited for malvertising and malware distribution. TikTok Business accounts are specifically targeted due to their potential for abuse in malicious advertising campaigns. The campaign employs Cloudflare Turnstile evasion techniques to bypass security measures. No specific dates, CVE IDs, or victim counts were disclosed in the report.