Threats · 218 days ago

Phishing campaign hijacks TikTok Business accounts

Attackers deploy adversary-in-the-middle phishing pages that bypass Cloudflare Turnstile to capture TikTok for Business credentials. Compromised accounts can be weaponized for malvertising and malware distribution in media and entertainment.

Timeline

• Mar 27 Reported by The Hacker News

Sources

1 source covering this story

• The Hacker News Mar 27

  AitM Phishing Targets TikTok Business Accounts Using Cloudflare Turnstile Evasion

  AitM phishing hijacks TikTok Business accounts via Cloudflare Turnstile evasion as SVG malware linked to BianLian targets Venezuela.

Entities

• BianLian

Part of the PlainSec briefing for 2026-03-28

Editions

• Briefing for 2026-03-28
• Briefing for 2026-03-27

Related stories

• TeamPCP pauses new supply-chain compromises, monetizes haul
• TeamPCP injects credential-stealer into LiteLLM package
• China‑linked Red Menshen embeds stealthy implants in telecom cores