Minacce · 189 giorni fa

Campagna di Phishing Colpisce TikTok for Business

Pagine di phishing AiTM ospitate su Cloudflare impersonano TikTok for Business e pagine Google. I link iniziali reindirizzano via un URL legittimo di Google Cloud Storage e sono collegati a domini bulk-registrati tramite NiceNIC il 24 marzo. Il kit AiTM funge da reverse proxy per catturare credenziali e abilitare account takeover utilizzabili per ad fraud e malvertising.

Cronologia

• 27 mar Segnalato da Infosecurity Magazine
• 26 mar Segnalato da BleepingComputer

Fonti

2 fonti che coprono questa storia

• Infosecurity Magazine 27 mar

  New Wave of AiTM Phishing Targets TikTok for Business

  Push Security has uncovered a new AiTM phishing campaign targeting TikTok for Business accounts using Google and TikTok themed login pages

• BleepingComputer 26 mar

  TikTok for Business accounts targeted in new phishing campaign

  Threat actors are targeting TikTok for Business accounts in a phishing campaign that prevents security bots from analyzing malicious pages.

Part of the PlainSec briefing for 2026-03-27

Editions

• Briefing for 2026-03-27

Storie correlate

• Phishing AitM Compromette Account TikTok for Business