A new scam has alerted cybersecurity experts. In this case These are Tiktok videos that steal user data.
As reported by Check Point Software Technologies, this new wave of malicious videos through the Chinese platform is putting the safety of thousands of people worldwide.
Apparently, These are seemingly useful content that, in reality, induce viewers to execute commands that are silently installing malware advanced specialized in the theft of information.
These malicious programs can capture from access credentials and bank card data to cryptocurrency portfolio information and two -step authentication codes.
Some of these videos, which have already reached hundreds of thousands of visualizations, are believed to have been generated by AIwhich allows its mass production, multiplatform dissemination and greater difficulty of detection by traditional security systems.
Data theft
For their part, Trend Micro informs that these malicious video indicate to viewers to execute a command sequence to allegedly activate legitimate software, such as Windows, Microsoft Office, Capcut and Spotify.
Once the malware is installed, You can take desktop screenshots and steal credentials, credit cards, cookies, cryptocurrency walletstext files and databases.
The videos are very similar, with only small differences in the camera angles and the download URL used by Powershell to obtain the payload. This suggests that the videos were probably created by automation.
In addition, the voice that gives the instructions also seems generated by AI.
One of the videos that claims to offer instructions on how to “improve your experience in Spotify instantly” has reached almost 500,000 visits, with more than 20,000 “like” and more than 100 comments, according to Trend Micro.