Threats & Adversaries · Phishing / BEC

New Phishing Campaign Targets TikTok for Business Accounts

Cloudflare-hosted AiTM phishing pages impersonate TikTok for Business and Google sign-in flows. Pages block security bots, capture credentials for account takeover, and enable ad fraud and malvertising. Push Security links the cluster to bulk-registered NiceNIC domains created March 24 and notes Google Storage redirects and Cloudflare Turnstile protections.

2 sources · Mar 27

Timeline

Sources

Part of the PlainSec briefing for 2026-03-27

Every edition of this story: New Phishing Campaign Targets TikTok for Business Accounts

More from today