TikTok for Business accounts targeted in new phishing campaign Threat actors are targeting TikTok for Business accounts with a phishing campaign that uses Cloudflare Turnstile checks and Google Storage-hosted pages to evade security bots. Attackers use NiceNIC-registered domains and reverse-proxy fake login pages to capture credentials and session cookies, enabling account takeover even when 2FA is active. #TikTokForBusiness #PushSecurity

New phishing campaign targets TikTok for Business accounts using Cloudflare Turnstile checks and Google Storage-hosted fake login pages to bypass security and steal credentials, enabling account takeovers despite 2FA. #TikTokFraud #AdFraud