Threats & Adversaries · Phishing / BEC
Attackers deploy adversary-in-the-middle phishing pages that bypass Cloudflare Turnstile to capture TikTok for Business credentials. Compromised accounts can be weaponized for malvertising and malware distribution in media and entertainment.
1 source · Mar 27
The Hacker News
AitM Phishing Targets TikTok Business Accounts Using Cloudflare Turnstile Evasion
AitM phishing hijacks TikTok Business accounts via Cloudflare Turnstile evasion as SVG malware linked to BianLian targets Venezuela.
originalPart of the PlainSec briefing for 2026-03-28
Every edition of this story: Phishing campaign hijacks TikTok Business accounts