Security Alert: Hackers Launch Large-Scale Attack on TikTok Shop Users
BlockBeats News, August 5th, Security research firm CTM360's latest report shows that a hacker operation codenamed "ClickTok" is carrying out attacks globally targeting TikTok Shop users. The attackers have set up over 10,000 spoofed websites and 5,000 malicious applications, using hybrid fraud methods to steal user account credentials and propagate the SparkKitty spyware, with the intention of hijacking users' cryptocurrency wallets.
This activity has expanded beyond the 17 countries officially covered by TikTok Shop. The attackers mainly exploit low-cost domains (such as .top and .shop) to establish phishing websites and spread malicious programs through malicious QR codes and download links.
Security experts recommend that users access TikTok Shop through the official application, carefully verify the authenticity of websites, and avoid downloading software from unknown sources.
You may also like

Error Prevented Content Extraction: Causes and Solutions
Key Takeaways Excessive requests can result in blocked access to data sources. Ensuring adherence to API usage policies…

A computation bug that allowed Truebit to be hacked for 8535 ETH

Vietnam Sets Mid-January Timeline for Pilot Crypto Exchange Approvals
Key Takeaways Vietnam aims to regulate its growing cryptocurrency market by licensing pilot digital asset exchanges under a…

Ledger Faces Yet Another Data Breach — Customer Information at Risk
Key Takeaways Ledger, the prominent hardware wallet manufacturer, has experienced another data breach via its payment processor, Global-e,…

2025 Crypto Violence Retrospective: Increasing Assaults and Fatal Incidents in a Growing Market
Key Takeaways Violent incidents involving cryptocurrency holders have escalated, with 2025 documenting 65 attacks, including 4 fatalities. The…

Court Sentences Criminal in Virtual Currency Fraud Case with Major Global Implications
Key Takeaways A landmark case in Beijing reveals a significant cross-border telecom and internet fraud scheme involving virtual…

Rep. Torres Targets Insider Trading on Prediction Markets Following Profitable Maduro Bet
Key Takeaways A substantial Polymarket wager concerning Maduro’s capture has led Rep. Ritchie Torres to propose new legislation…

Cybersecurity Firm Warns of Shai-Hulud 3.0 Threatening the NPM Ecosystem
Key Takeaways SlowMist’s CISO has issued a warning about Shai-Hulud 3.0, a significant threat targeting the NPM ecosystem…

SlowMist Warns of Return of Shai-Hulud 3.0 Supply Chain Attack
Key Takeaways SlowMist’s Chief Information Security Officer alerted the community about the resurgence of Shai-Hulud 3.0, an advanced…

Hackers Exploit Rainbow Six Siege Servers, Ubisoft Responds
Key Takeaways Hackers successfully breached Rainbow Six Siege, distributing enormous amounts of in-game currency. Players discovered unexpected changes…

Trust Wallet Investigates Browser Extension Security Incident
Key Takeaways A recent security incident in Trust Wallet’s browser extension has affected 2,596 wallets, leading to the…

Trust Wallet Users Experience $7 Million Loss Due to Hacked Chrome Extension
Key Takeaways Trust Wallet faced a significant security breach affecting its Chrome extension, resulting in over $7 million…

Trust Wallet Browser Extension Security Incident Leads to Losses
Key Takeaways Trust Wallet identified a significant security breach in its browser extension version 2.68. Approximately over $6…

Trust Wallet Hack Results in $3.5 Million Loss for Major Wallet Holder
Key Takeaways A significant Trust Wallet hack led to the theft of $3.5 million from an inactive wallet.…

Social Engineering in the Crypto Universe: Safeguarding Your Assets in 2025
Key Takeaways Social engineering, a psychological manipulation tactic, has been the leading cause of crypto asset theft in…

Crypto Advice for Newcomers, Veterans, and Skeptics in 2026
Key Takeaways Newcomers should learn about the fundamentals of crypto and blockchain technology before investing. Experimenting with crypto…

Nofx’s Two-Month Journey from Stardom to Scandal: The Open Source Dilemma
Key Takeaways Nofx’s rise and fall in two months highlights inherent challenges in open source projects. A transition…

Enhancing the Future of Cryptocurrency Exchange: Understanding the Landscape
Key Takeaways Cryptocurrency exchange platforms are pivotal for digital currency transactions, offering diverse services tailored to user needs.…
Error Prevented Content Extraction: Causes and Solutions
Key Takeaways Excessive requests can result in blocked access to data sources. Ensuring adherence to API usage policies…
A computation bug that allowed Truebit to be hacked for 8535 ETH
Vietnam Sets Mid-January Timeline for Pilot Crypto Exchange Approvals
Key Takeaways Vietnam aims to regulate its growing cryptocurrency market by licensing pilot digital asset exchanges under a…
Ledger Faces Yet Another Data Breach — Customer Information at Risk
Key Takeaways Ledger, the prominent hardware wallet manufacturer, has experienced another data breach via its payment processor, Global-e,…
2025 Crypto Violence Retrospective: Increasing Assaults and Fatal Incidents in a Growing Market
Key Takeaways Violent incidents involving cryptocurrency holders have escalated, with 2025 documenting 65 attacks, including 4 fatalities. The…
Court Sentences Criminal in Virtual Currency Fraud Case with Major Global Implications
Key Takeaways A landmark case in Beijing reveals a significant cross-border telecom and internet fraud scheme involving virtual…