New Wave of AiTM Phishing Targets TikTok for Business (infosecurity-magazine.com)

• AiTM phishing campaign targeting TikTok for Business discovered.
• Fake Google and TikTok pages used to harvest cookies.
• Push Security advises MFA and user vigilance.

"Push Security has uncovered a new AiTM phishing campaign targeting TikTok for Business accounts. The attackers use fake Google and TikTok login pages to steal credentials and session cookies. Businesses should increase anti-phishing vigilance."