TechFlame news, August 5. According to Forbes, the latest report from the security research firm CTM360 shows that a hacking campaign codenamed “ClickTalk” is attacking TikTok Shop users worldwide. The attackers have set up more than 10,000

fake websites and 5,000 malicious applications to steal user account credentials and spread SparkKitty spyware through mixed fraud with the intention of stealing users' cryptocurrency wallets.

The campaign has expanded beyond the 17 countries officially covered by TikTok Shop. Attackers mainly use low-cost domain names (such

as.top and.shop) to establish phishing websites and spread malicious programs through malicious QR codes and download links.

Security experts recommend that users visit TikTok Shop through the official app, carefully verify the website's authenticity, and avoid downloading software from unknown sources.