TikTok Pro spyware spreads amid TikTok blocking fears

[НСК-СБ]

TikTok Pro spyware spreads amid TikTok blocking fears

15:37 / 10 September, 2020

TikTok Pro contains full-featured spyware capable of stealing Facebook user credentials.

Security Researchers Zscaler discovered a new spy campaign against Android users, in which cybercriminals are distributing the "Pro version" of TikTok amid fears of possible blocking applications in the US. Malware can take control of basic device functions - taking photos, reading and sending SMS messages, making phone calls, and launching applications. In addition, malware can hijack Facebook user credentials using phishing.

The malicious TikTok Pro app is spread by cybercriminals via SMS and WhatsApp messages, which prompts users to download the “latest version of TikTok” from a specific web address. In the first wave of spread, the malware only asked for credentials and permission to use the functions of the Android device, including the camera and microphone. As a result, users were bombarded with ads.

In the second wave, cybercriminals began to distribute a new version of the application, which already contains "fully functional spyware with premium features that makes it easy to spy on users."

After installing and opening TikTok Pro, a fake notification is displayed on the device, which then disappears along with the application icon. The notification acts as a distraction while the malware lurks on the device and makes the user think the app is just malfunctioning.

In addition to taking control of smartphone functions such as taking photos, sending SMS messages, executing commands, taking screenshots, making phone calls, and launching other applications on the device, spyware is also capable of stealing Facebook login credentials - a unique feature that is not typical for these spy apps.
More details: https://www.securitylab.ru/news/511972.php

 

[Матушкин Андрей Николаевич]

Security Researchers Zscaler discovered a new spy campaign against Android users, in which cybercriminals are distributing the "Pro version" of TikTok amid fears of possible blocking applications in the US. Malware can take control of basic device functions - taking photos, reading and sending SMS messages, making phone calls, and launching applications. In addition, malware can hijack Facebook user credentials using phishing.

The malicious TikTok Pro app is spread by cybercriminals via SMS and WhatsApp messages, which prompts users to download the “latest version of TikTok” from a specific web address. In the first wave of spread, the malware only asked for credentials and permission to use the functions of the Android device, including the camera and microphone. As a result, users were bombarded with ads.

In the second wave, cybercriminals began to distribute a new version of the application, which already contains "fully functional spyware with premium features that makes it easy to spy on users."

After installing and opening TikTok Pro, a fake notification is displayed on the device, which then disappears along with the application icon. The notification acts as a distraction while the malware lurks on the device and makes the user think the app is just malfunctioning.

In addition to taking control of smartphone functions such as taking photos, sending SMS messages, executing commands, taking screenshots, making phone calls, and launching other applications on the device, spyware can also steal Facebook login credentials - a unique feature that is not typical for these spy apps.

THANK!!!

 

[Частный детектив. Армения. Ереван.]

Did they distribute the Pro version on left-wing sites? I cannot understand.