Cyber attacks continue to occur on TikTok, sending DMs to take over accounts



It has been reported that there have been a series of cyber attacks on TikTok that have taken over accounts via direct mail. The attacks exploit

a zero-day vulnerability , and TikTok has already taken measures to prevent it.

TikTok says hackers targeted brands and celebrity accounts, including CNN | South China Morning Post
https://www.scmp.com/news/world/united-states-canada/article/3265406/tiktok-says-hackers-targeted-brands-and-celebrity-accounts-including-cnn



TikTok fixes zero-day bug used to hijack high-profile accounts

https://www.bleepingcomputer.com/news/security/tiktok-fixes-zero-day-bug-used-to-hijack-high-profile-accounts/

According to reports, the attack involved simply opening a direct message containing a malicious link to take over the account. CNN was one of the first to fall victim to the attack, as was Sony. Celebrity Paris Hilton was also attacked, but her account was not taken over.

TikTok's security team is aware of potential attacks targeting brands and celebrities and has already taken steps to prevent them.

The company also said it is working with affected account owners to restore access.

TikTok has not disclosed the specific vulnerabilities or the full scope of the attack surface, which it said was 'very small.'

TikTok is a popular app that, as of September 2021, had over 1 billion monthly active users.

TikTok reaches 1 billion monthly active users - GIGAZINE



Recently, President Joe Biden and Donald Trump have opened accounts in preparation for the 2024 US presidential election. For that reason, there are concerns that if accounts can be hijacked, it could have an impact on the presidential election.

Donald Trump opens TikTok account and gains 3 million followers - GIGAZINE



in Software,   Web Service,   Security, Posted by logc_nt