Security Alert: Hackers Launch Large-Scale Attack on TikTok Shop Users

BlockBeats News, August 5th, Security research firm CTM360's latest report shows that a hacker operation codenamed "ClickTok" is carrying out attacks globally targeting TikTok Shop users. The attackers have set up over 10,000 spoofed websites and 5,000 malicious applications, using hybrid fraud methods to steal user account credentials and propagate the SparkKitty spyware, with the intention of hijacking users' cryptocurrency wallets.

This activity has expanded beyond the 17 countries officially covered by TikTok Shop. The attackers mainly exploit low-cost domains (such as .top and .shop) to establish phishing websites and spread malicious programs through malicious QR codes and download links.

Security experts recommend that users access TikTok Shop through the official application, carefully verify the authenticity of websites, and avoid downloading software from unknown sources.