Cybersecurity researchers have uncovered a sophisticated scam campaign where threat actors use AI-generated videos to impersonate TikTok Shop sellers, tricking users into depositing cryptocurrency and downloading malware. CTM360, a cybersecurity firm, identified over 10,000 phishing URLs and 5,000 malicious app download sites in what they describe as a “widespread, ongoing, malicious campaign” that exploits user trust in TikTok’s brand recognition.
What you should know: Scammers are creating fake TikTok Shop profiles complete with AI-generated content to appear legitimate while distributing malware called SparkKitty.
- The campaign uses replicas of TikTok Shop profiles with AI-generated videos to convince users they’re interacting with real sellers.
- Fake ads on Facebook and TikTok promise steep discounts but redirect users to bogus versions of TikTok Wholesale and TikTok Mall.
- CTM360 discovered “10,000+ phony phishing URLs that are used to lure users into depositing cryptocurrency on fraudulent storefronts, leveraging fake product listings and urgency tactics.”
How the scam works: Threat actors masquerade as TikTok Shop affiliate management platforms to trick users into downloading malicious apps.
- Scammers distribute malicious app files through embedded download links and QR codes across thousands of fake download sites.
- Once downloaded, the apps deploy SparkKitty malware capable of harvesting data from both Android and iOS devices.
- Victims are asked to pay in cryptocurrency or deposit money into fake on-site wallets with promises of “future commission payouts or withdrawal bonuses that never materialize.”
Red flags to watch for: The scam sites use telltale signs that can help users identify fraudulent operations.
- Fake sites typically use free or low-cost top-level domains such as .top, .shop, and .icu rather than official TikTok domains.
- Legitimate TikTok Shop and affiliate programs operate exclusively through tiktok.com and have strict guidelines.
- Real TikTok representatives won’t proactively reach out asking users to deposit money into crypto wallets.
Why this matters: The campaign represents a broader trend of scammers exploiting trusted brand names and AI technology to commit fraud.
- “The core motive is fraudulent financial gain, exploiting the trust in online shopping, affiliate earnings, and the irreversibility of certain payment methods,” CTM360 explains.
- The scam follows similar patterns to other recent social media fraud, including fake Starlink deals that circulated on Facebook last month to steal credit card information.
Recent Stories
DOE fusion roadmap targets 2030s commercial deployment as AI drives $9B investment
The Department of Energy has released a new roadmap targeting commercial-scale fusion power deployment by the mid-2030s, though the plan lacks specific funding commitments and relies on scientific breakthroughs that have eluded researchers for decades. The strategy emphasizes public-private partnerships and positions AI as both a research tool and motivation for developing fusion energy to meet data centers' growing electricity demands. The big picture: The DOE's roadmap aims to "deliver the public infrastructure that supports the fusion private sector scale up in the 2030s," but acknowledges it cannot commit to specific funding levels and remains subject to Congressional appropriations. Why...
Oct 17, 2025Tying it all together: Credo’s purple cables power the $4B AI data center boom
Credo, a Silicon Valley semiconductor company specializing in data center cables and chips, has seen its stock price more than double this year to $143.61, following a 245% surge in 2024. The company's signature purple cables, which cost between $300-$500 each, have become essential infrastructure for AI data centers, positioning Credo to capitalize on the trillion-dollar AI infrastructure expansion as hyperscalers like Amazon, Microsoft, and Elon Musk's xAI rapidly build out massive computing facilities. What you should know: Credo's active electrical cables (AECs) are becoming indispensable for connecting the massive GPU clusters required for AI training and inference. The company...
Oct 17, 2025Vatican launches Latin American AI network for human development
The Vatican hosted a two-day conference bringing together 50 global experts to explore how artificial intelligence can advance peace, social justice, and human development. The event launched the Latin American AI Network for Integral Human Development and established principles for ethical AI governance that prioritize human dignity over technological advancement. What you should know: The Pontifical Academy of Social Sciences, the Vatican's research body for social issues, organized the "Digital Rerum Novarum" conference on October 16-17, combining academic research with practical AI applications. Participants included leading experts from MIT, Microsoft, Columbia University, the UN, and major European institutions. The conference...