Zero Day on TikTok: Celebrity and brand accounts hacked

Tomcat

Professional
Messages
2,380
Reputation
4
Reaction score
407
Points
83
How hackers steal star accounts with a single message.

TikTok has been rocked by a new wave of cyberattacks that have compromised the official accounts of celebrities and brands, including those of CNN, Sony and Paris Hilton. This was reported by Forbes based on information from sources inside the company.

Malicious code is distributed via private messages inside the TikTok app. Surprisingly, to infect the device, the user just needs to open a message — you don't need to download, click or reply anything. Hacked accounts do not publish new content, and at the moment it is not known how many users were affected by the attack.

A TikTok representative noted that the company's security team is aware of a possible Zero-day vulnerability targeting a number of brand and celebrity accounts. TikTok has taken steps to stop the attack and prevent similar incidents in the future, and is also working with the owners of affected accounts to restore access.

TikTok said the number of compromised accounts turned out to be "very small", but declined to give a specific number or provide details on how TikTok protects other vulnerable accounts. TikTok has over a billion users worldwide.

A representative of the social network did not answer the question of whether hackers continue to actively compromise accounts. Representatives for Paris Hilton, CNN and Sony also did not respond to requests for comment.

The Semafor publication reported that due to the hacking of the account last week, CNN was forced to deactivate the account for several days. A CNN spokesperson said the company is working with TikTok on additional cybersecurity measures.

We should add that TikTok's practices are under close scrutiny by US lawmakers. There is concern that the Chinese government may use ByteDance's parent company to spy on Americans or influence the messages it displays. Such concerns have resulted in a whole law that requires ByteDance to sell the app to the United States-otherwise TikTok will be banned in the country. TikTok and ByteDance are challenging the law in court.

Earlier, former US Treasury Secretary Steven Mnuchin suggested revamping the app from scratch. Mnuchin suggests purchasing the app without the code subject to export restrictions, which will require a complete redesign of the service. Such a measure, according to Mnuchin, can allow you to purchase TikTok at a reduced price.

Also, in response to app regulation, TikTok is developing a clone of its recommendation algorithm for 170 million users in the United States. The US version will work independently of ByteDance and will satisfy US lawmakers.
 
Top