AitM Phishing Targets TikTok Business Accounts Using Cloudflare Turnstile Evasion
March 27, 2026, 8:01 p.m.
Description
A new phishing campaign is targeting TikTok for Business accounts using adversary-in-the-middle (AitM) techniques. The attackers employ Cloudflare Turnstile to evade detection and create convincing lookalike pages impersonating TikTok for Business or Google Careers. Victims are tricked into clicking malicious links, leading to credential theft. The campaign aims to seize control of business accounts, which can be used for malvertising and malware distribution. Multiple domains are involved in hosting the phishing pages. Additionally, a separate campaign using SVG file attachments to deliver malware has been observed in Venezuela, with potential links to BianLian ransomware activity.
Tags
Date
- Created: March 27, 2026, 6:58 p.m.
- Published: March 27, 2026, 6:58 p.m.
- Modified: March 27, 2026, 8:01 p.m.
Additional Informations
- Technology
- Media
- welcome.careerstransform.com
- welcome.careerscrews.com
- welcome.careersstaffgrid.com
- welcome.careersgrower.com
- welcome.careersprogress.com
- welcome.careerssuccess.com
- welcome.careersupskill.com
- welcome.careersworkflow.com
- welcome.careersengage.com
- welcome.careerstaffer.com
- Venezuela, Bolivarian Republic of