Fake TikTok Downloaders on Chrome and Edge Spying on 130,000 Users

Summary

Researchers discovered malicious TikTok downloader extensions installed on Chrome and Microsoft Edge that affected over 130,000 users. The extensions employed device fingerprinting techniques to spy on users and steal sensitive browser data. These fake tools were distributed through official browser extension marketplaces, posing a supply-chain risk to unsuspecting users.

Indicators of Compromise

• malware — Fake TikTok downloader extensions

Entities