Recent technical reports have revealed a large-scale scam campaign using TikTok and Facebook shops as fronts to distribute malware specifically targeting young people. The campaign aims to steal money and personal data, highlighting the importance of caution when dealing with digital apps and offers on social media.

According to a report by TechRadar, cybersecurity firm CTM360 detected cybercriminals impersonating legitimate sellers on TikTok Shops, using AI-generated content to boost their credibility.

The scam is not limited to TikTok; fake shops on Facebook offering attractive discounts have also been discovered, serving as fraudulent fronts for organized scams.

Investigations revealed the main goal is to seize cryptocurrency payments and steal sensitive data through phishing sites named TikTok Wholesale and TikTok Mall, linked to over 10,000 fake URLs. Some sites ask users to pay deposits or buy fake products, while malware like SparkKitty infects Android and iOS devices, stealing data and granting attackers long-term access even after initial breach.

Some scammers pose as affiliate marketing program managers but distribute disguised malicious apps, with over 5,000 download links detected. These apps often come with encrypted links or QR codes to bypass security systems and avoid detection by users or antivirus software.

Attackers use psychological tactics such as countdowns and limited-time offers to pressure victims into quick decisions without verification. They exploit cheap domains like .top, .shop, and .icu to rapidly and cheaply spread their sites.

Cybersecurity experts recommend:

• Always verify the website address before payment and ensure HTTPS is present.
• Be cautious of exaggerated discounts or illogical offers.
• Use secure payment methods and avoid direct cryptocurrency transfers.
• Keep antivirus software updated and enable real-time protection.
• Do not fully trust even professionally looking shops.

This campaign reveals the evolution of online scams and confirms that cybercriminals have become more professional in exploiting trusted digital platforms to execute their schemes. Awareness and digital vigilance remain the first line of defense against these attacks, especially with the growing prevalence of online shopping and digital payments.

TikTok launches Footnotes feature to combat misinformation.