Fake TikTok Downloader Extensions Infect 130,000 Browser Users
ID: eab17cf9-2d00-5583-b06e-b7a81310f161
STIX ID: report--eab17cf9-2d00-5583-b06e-b7a81310f161
Feed Name: Cyber Press
Threat Score
A coordinated campaign distributed at least a dozen malicious Chrome/Edge extensions (marketed as TikTok downloaders) that together compromised more than 130,000 users—about 12,500 still active—by using a shared MV3 codebase and remote JSON configurations hosted on typosquatted domains to activate post-install tracking, harvest detailed telemetry for persistent fingerprinting, and evade store detection through rapid re-uploads and dynamic behavior changes.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.