Cybersecurity researchers have reportedly uncovered a large-scale campaign in which cybercriminals are using TikTok Shops to distribute malware and defraud users, particularly younger customers.
AI-generated content used to mimic real sellers
According to TechRadar, security analysts at CTM360 found that the perpetrators impersonate legitimate e-commerce sellers, often employing AI-generated content to bolster their credibility. The scam is not confined to TikTok, similar fraudulent storefronts have been detected on Facebook, where enticing advertisements offering steep discounts are used to lure victims, noted the publication.
The aim is reportedly twofold: to steal cryptocurrency payments and to compromise personal information through malicious software. Investigators have linked TikTok Wholesale and Mall-branded pages to more than 10,000 fraudulent URLs.
Reportedly, these mimic official retail portals but redirect visitors to phishing websites. Victims are then prompted to pay a deposit into a fake online wallet or purchase goods that do not exist.
Malicious apps disguised as affiliate tools
Some operations pose as affiliate programme managers, distributing disguised malicious applications. Over 5,000 download sources have been identified, many of which employ embedded links or QR codes to evade detection, the report added. One notable threat, dubbed “SparkKitty,” is capable of extracting data from Android and iOS devices, allowing attackers prolonged access even after the initial breach.
Because cryptocurrency transfers are irreversible, victims have little chance of recovering their losses. Scammers often deploy countdown timers or limited-time deals to create a sense of urgency, pushing targets to act without verifying authenticity.
Analysis of the fraudulent domains reveals a reliance on inexpensive extensions such as .top, .shop, and .icu, which can be quickly purchased and deployed.
Security precautions for online shoppers
Security experts advise consumers to verify web addresses before making payments, ensure sites use secure HTTPS connections, and avoid unusually steep discounts. They also recommend sticking to standard payment methods, avoiding direct cryptocurrency transfers, and maintaining up-to-date antivirus software with real-time protection. Firewalls and vigilance, even on polished-looking platforms, remain essential in identifying and avoiding scams.
