<\/p>\n
Cybersecurity researchers have reportedly uncovered a large-scale campaign in which cybercriminals are using TikTok Shops to distribute malware and defraud users, particularly younger customers.<\/p>\n<\/div>\n
According to TechRadar,<\/a> security analysts at CTM360 found that the perpetrators impersonate legitimate e-commerce sellers, often employing AI-generated content to bolster their credibility. The scam is not confined to TikTok, similar fraudulent storefronts have been detected on Facebook, where enticing advertisements offering steep discounts are used to lure victims, noted the publication.<\/p>\n<\/div>\n The aim is reportedly twofold: to steal cryptocurrency<\/a> payments and to compromise personal information through malicious software. Investigators have linked TikTok Wholesale and Mall-branded pages to more than 10,000 fraudulent URLs.<\/p>\n<\/div>\n Reportedly, these mimic official retail portals but redirect visitors to phishing websites. Victims are then prompted to pay a deposit into a fake online wallet or purchase goods that do not exist.<\/p>\n<\/div>\n Some operations pose as affiliate programme managers,<\/a> distributing disguised malicious applications. Over 5,000 download sources have been identified, many of which employ embedded links or QR codes to evade detection, the report added. One notable threat, dubbed \u201cSparkKitty,\u201d is capable of extracting data from Android and iOS devices, allowing attackers prolonged access even after the initial breach.<\/p>\n<\/div>\n Because cryptocurrency transfers are irreversible, victims have little chance of recovering their losses. Scammers <\/a>often deploy countdown timers or limited-time deals to create a sense of urgency, pushing targets to act without verifying authenticity.<\/p>\n<\/div>\nMalicious apps disguised as affiliate tools<\/h2>\n