High profile TikTok accounts, including CNN, Sony, and—er—Paris Hilton have been targeted in a recent attack.
CNN was the first account takeover that made the news, with Semafor reporting that the account was down for several days after the incident. According to Forbes, the attack happens without the account owner needing to click on or open anything—known as a zero-click attack. All they need to do is open a DM. The account is then taken over and the user loses access.
Read more…
Source: Malwarebytes Labs
Related:
- Israel: Extortionists posed as women online, trapped victims with intimate photos
February 14, 2025
Two men were arrested on Thursday for operating a sophisticated sexual extortion network. According to the investigation, they posed as women on social media lured victims into sending intimate photos, and then threatened to expose the images unless they paid money. The prosecution stated: “They acted systematically, cynically exploiting their victims.” David Bracha, 26, from Rishon ...
- New Star Blizzard spear-phishing campaign targets WhatsApp accounts
January 16, 2025
Star Blizzard’s new spear-phishing campaign, while novel in that it uses and targets WhatsApp for the first time, exhibits familiar spear-phishing TTPs for Star Blizzard, with the threat actor initiating email contact with their targets, to engage them, before sending them a second message containing a malicious link. The sender address used by the threat actor ...
- With TikTok U.S. Ban Looming, Users Flock to Red Note – Another Chinese-Owned App
January 14, 2025
TikTok could be outlawed in the U.S. as soon as Jan. 19 over concerns about its Chinese ownership, unless it gets a reprieve from the Supreme Court or if Beijing-based parent company ByteDance complies with a federal law forcing it to sell its stake in the app. With that sword dangling over TikTok’s head, thousands of ...
- Meta shelves fact-checking for ‘Community Notes’ model in major policy reversal
January 7, 2025
Social media giant Meta on Tuesday scrapped its U.S. fact-checking program for a community-based system similar to X and reduced the curbs on discussions around contentious topics such as immigration and gender identity. The move marks a reversal in Meta’s content moderation policy as CEO Mark Zuckerberg has long championed active content moderation despite criticism from ...
- Telegram reports spike in sharing user data with law enforcement
January 7, 2025
Newly released data from messaging app Telegram reveals a sharp rise in the number of data demands it fulfilled over the past year for users’ data from requesting law enforcement agencies. The rise in fulfilled user requests comes months after French authorities arrested Telegram CEO Pavel Durov in August in part for the company’s longstanding refusal ...
- Pressure mounts on EU to use legal weapons against Musk’s interference
January 7, 2025
What are you waiting for, Brussels? Elon Musk’s decision to host German far-right leader Alice Weidel in a livestream on X is sparking fury from European Union leaders and lawmakers, who on Monday urged Brussels to deploy its full legal might to rein in the billionaire tech magnate. In response, the European Commission said the SpaceX ...