ClickTok hacking campaign launches large-scale attack on TikTok Shop users

According to a recent report by security research firm CTM360, a hacker activity codenamed "ClickTok" is conducting attacks on TikTok Shop users worldwide. The attacker has established over 10000 counterfeit websites and 5000 malicious applications, stealing user account credentials and spreading SparkKitty spyware through mixed fraud methods, with the intention of stealing users' cryptocurrency wallets. The event has expanded beyond the 17 countries officially covered by TikTok Shop. Attackers mainly use low-cost domain names such as. top and. shop to establish phishing websites and spread malicious programs through malicious QR codes and download links. Security experts advise users to access TikTok Shop through the official application, carefully verify the authenticity of the website, and avoid downloading software from unknown sources.