Skip to content
TikTok Malware Scam Targets Users with Fake Activation Guides

TikTok Malware Scam Targets Users with Fake Activation Guides

First seen 2 Dec 2025, 18:33 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

Cybercriminals are exploiting TikTok to distribute malware disguised as activation guides for popular software. Users are tricked into executing PowerShell commands that download the Aura Stealer, which steals credentials and authentication information. This campaign has been confirmed by security expert Xavier Mertens and is similar to earlier schemes observed this year.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 212d ago How this analysis works

More articles in this cluster (3)

Following this threat?

Track Aura Stealer and Cloudflare in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed