A critical bug was found in TikTok that allowed the accounts of stars to be hacked

TikTok’s press service acknowledged that the vulnerability was promptly fastened. In the meanwhile, solely two accounts are identified to have been compromised, however the variety of victims might be larger.

These assaults are referred to as “zero-click assaults” and are generally utilized by hackers to spy on celebrities and journalists.

That is an assault that doesn’t require any motion on the a part of the sufferer. To hold out customary phishing assaults, hackers should trick the sufferer into clicking on a faux hyperlink or downloading and operating malware. However a zero-click assault is virtually invisible to the person – it makes use of vulnerabilities within the OS to launch malicious code.

Within the case of TikTok, the primary objective seems to have been a whole takeover of standard accounts.

Following the hack, the accounts in query for Sony, CNN and Paris Hilton had been deleted to forestall additional abuse.

It’s value noting that this isn’t the primary vulnerability that has been present in TikTok. For instance, once more in 2022, Microsoft specialists found a critical vulnerability within the TikTok software for Android. The bug allowed attackers to immediately seize different folks’s accounts, instantly following the sufferer clicked on a particular malicious hyperlink.