Cybercriminals have started to use the popular social media platform TikTok to spread malware, using social engineering to trick users into installing harmful scripts by disguising them as beneficial software activations. By creating faceless videos with installation instructions, the criminals bypass traditional security measures and cause the users to assist in the installation of Vidar and StealC infostealers. Trend Micro identified several TikTok accounts involved in the distribution.

Microsoft Takes Down Lumma Malware After 394,000 Windows Infections Globally
In collaboration with global law enforcement, Microsoft’s Digital Crimes Unit (DCU) has taken down the Lumma Stealer malware project. Over 394,000 Windows computers were infected