TIKTOUK WordPress Credential Toolkit Harvests 50,000 Secrets From 37,000 Domains
ID: 5efc39a4-8147-5c5e-b093-9847cb16f5d4
STIX ID: report--5efc39a4-8147-5c5e-b093-9847cb16f5d4
Feed Name: Cyber Press
Threat Score
Security researchers analyzed TIKTOUK, a credential-collection toolkit that combines two Python scripts and a Go crawler to harvest WordPress credentials, exposed JavaScript tokens (SendGrid, Anthropic, Bedrock), and AWS-shaped key pairs; a leaked control panel suggested ~50,000 server-side credentials across ~37,000 domains, researchers provided SHA-256 IoCs and an IP linked to payload/controller traffic, and referenced related WordPress CVEs while noting controlled tests did not confirm successful exploitation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.