
- Push Security uncovers phishing campaign targeting TikTok Business accounts
- Attackers use Google Storage links and AITM kits to steal credentials, cookies, and MFA codes
- Compromised accounts exploited for fraudulent ad campaigns and infostealer distribution via fake TikTok content