LIVE · cybersecurity feed
Live wire
security

“Adult TikTok” searches lead to scams

Users searching for adult content associated with TikTok are being targeted by scam websites that exploit the platform's name to drive traffic. These sites do not host genuine content from TikTok but instead funnel users through various advertising and data collection schemes.

ZeroDay News ·

Source: Malwarebytes Labs

Users searching for adult content associated with TikTok are being targeted by scam websites that exploit the platform's name to drive traffic. These sites do not host genuine content from TikTok but instead funnel users through various advertising and data collection schemes.

The scam pages are designed to rank highly in search engine results for terms combining "TikTok" with adult content keywords. They often present themselves as solutions to users' searches, promising exclusive, uncensored videos without requiring sign-up. Visual cues typically include blurred video thumbnails, "18+ only" labels, and calls to action like "Start watching" or "Sign up for free."

Upon clicking, users are rarely presented with the promised content. Instead, they are redirected through advertising networks, prompted to provide email addresses or payment card details for "age verification," or encouraged to install applications from outside official app stores. Each interaction, from a simple click to a data submission, generates revenue for the site operators through advertising, affiliate commissions, or lead generation.

The methods of monetization vary but commonly include affiliate commissions from dating sites, adult subscriptions, or VPN services; advertising revenue from redirects and pop-ups; and lead generation through the collection and sale of email addresses for spam and phishing campaigns. A significant risk involves "subscription traps," where users provide payment card details for age verification and are then unknowingly enrolled in recurring subscription services. Some pages may also attempt to push unwanted software or malware.

A key element of these scams is their reliance on the embarrassment factor associated with searching for adult content, which makes victims less likely to report the incidents or seek advice. This allows the schemes to persist and spread more easily.

Users are advised to immediately close any tabs encountered through these searches and avoid entering personal information such as email addresses, payment card details, or dates of birth. Installing any software prompted by these pages is also strongly discouraged. If personal information has already been submitted, users should treat it as compromised, monitor for follow-up spam or phishing attempts, and change any reused passwords.

ShareXLinkedInWhatsAppFacebook

More News

view all →
security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.