Phishing Campaign Hijacks TikTok Business Accounts

Attackers deploy adversary-in-the-middle phishing pages that bypass Cloudflare Turnstile to capture TikTok for Business credentials. Compromised accounts can be weaponized for malvertising and malware distribution in media and entertainment.

Part of the PlainSec briefing for 2026-03-28

Sources