A fake TikTok website has appeared on the Runet. It is used to steal accounts
A fake TikTok website called tiktok-business.ru appeared on the Web, imitating the official application. It is used to steal other people’s accounts. Alexander Vurasko, an analyst at Infosecurity a Softline, spoke about this.
According to Vurasco, attackers are sending users an offer to install a service with the ability to monetize their account. After that, the victims follow the link and enter the data from the account. Then the user is redirected to the official website, and the cybercriminals get the data from the account.
TikTok stressed that their platform now does not provide monetization opportunities for Russian users. The company also sent a request to block the fraudulent site.
The expert noted that this is a common system of “hijacking” accounts. Similarly, scammers steal VKontakte communities by inviting their owners to participate in promotions. They are sent links to fake pages, where they must log in through the social network. Representatives of “VKontakte” said there is no surge in such fraud, but such theft methods affect all popular platforms.
Information security experts at the Krok IT company, Alexander Chernykhov, said many fraudulent sites on the Internet copy popular social networks. They are mainly designed to collect user data. He also suggested that the fake TikTok site is the first sign of a new phishing attack wave.
