A fake TikTok website called tiktok-business.ru appeared on the Web, imitating the official application. It is used to steal other people’s accounts. Alexander Vurasko, an analyst at Infosecurity a Softline, told about this.

Screenshot of the fraudulent website tiktok-business.ru

According to Vurasco, attackers are sending users an offer to install a service with the ability to monetize their account. After that, the victims follow the link and enter the data from the account. Then the user is redirected to the official website, and the cybercriminals get the data from the account.

TikTok stressed that their platform now does not provide monetization opportunities for Russian users. The company also sent a request to block the fraudulent site.

The expert noted that this is a common system of “hijacking” of accounts. Similarly, scammers steal VKontakte communities by inviting their owners to participate in promotions. They are sent links to fake pages where they are required to log in through the social network. Representatives of VKontakte said that there is no surge in such fraud, but such methods of theft affect all popular platforms.

Information security expert at the Krok IT company, Alexander Chernykhov, said that there are many fraudulent sites on the Internet that copy popular social networks. They are mainly designed to collect user data. He also suggested that the fake TikTok site is the first sign of a new wave of phishing attacks.