Back Securityaffairs.Co

New AITM phishing wave hijacks TikTok Business accounts

Securityaffairs.Co •Pierluigi Paganini • March 27, 2026

A new AITM phishing campaign targets TikTok Business accounts to hijack them for malvertising, continuing tactics seen in earlier Google-themed scams. Push Security researchers uncovered a new wave of AITM phishing pages targeting TikTok for Business accounts, aiming to hijack them for malvertising. The campaign includes TikTok and Google-themed fake pages, showing links to […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New AiTM Phishing Campaign Targets TikTok for Business Accounts A recent phishing campaign has emerged, specifically targeting TikTok for Business accounts. Cybercriminals have registered multiple adversary-in-the-middle (AiTM) phishing pages on March 24, 2026, using a common naming convention linked to welcome.careers*[.]com. These pages are hosted behind Cloudflare and utilize the Nicenic International Group registrar, known for bulk phishing registrations. Victims are lured through a legitimate Google Cloud Storage URL, which redirects them to malicious pages that impersonate TikTok and Google Careers. Users are prompted to fill out a form before being directed to a fake login page designed to capture credentials and session cookies. This campaign exploits the common practice of logging into TikTok using Google single sign-on, potentially compromising both accounts. The scope of the attack is significant, as TikTok for Business accounts are used by companies to manage advertising campaigns, making them attractive targets for malvertising and ad fraud. Push Security has linked this campaign to previous phishing efforts targeting Google Ad Manager accounts. The situation remains active as the number of malicious domains is expected to increase. 4 sources 65

Extracted Entities

New AITM phishing wave hijacks TikTok Business accounts

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

MITRE ATT&CK (1)

Platforms (1)