2-Spyware TikTok Pro Scam: Ongoing Toll Fraud Malware Targeting Users
Article Content
- •TikTok Pro is a scam app linked to toll fraud malware, not an official TikTok product.
- •The malware spreads via SMS and messaging platforms, exploiting user trust in popular apps.
- •Users are advised to avoid links claiming to offer TikTok Pro and to uninstall suspicious apps.
The TikTok Pro app is identified as a scam, not affiliated with TikTok, and has been linked to toll fraud malware. This malware spreads through SMS and messaging platforms, enticing users with promises of enhanced app features. Reports indicate that the scam has been active since at least 2020, with renewed interest in 2026 amid TikTok's ongoing scrutiny in the U.S. and India. Security vendors, including Lookout and K7 Labs, have documented the app's behavior, which includes hiding its icon and sending unauthorized messages to contacts. Users are advised to avoid any links claiming to offer TikTok Pro and to uninstall any suspicious apps. The current status shows no new campaigns specifically named TikTok Pro in 2026, but the old tactics are still relevant. The threat remains significant as users continue to fall for these scams.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (8)
Following this threat?
Track Spymax in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
How does the TikTok Pro scam work?
What should I do if I downloaded TikTok Pro?
Are there any new versions of TikTok Pro in 2026?
Continue Reading
North Korean Hackers Steal $6.3 Billion from Binance in Record Crypto Heist On October 29, 2026, Binance, the world's largest cryptocurrency exchange, reported a massive security breach resulting in the theft of approximately $6.3 billion across ten blockchains. The attack is attributed to North Korea's TraderTraitor hacking group, which gained access via a compromised DevOps engineer's… 
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…