Short video app TikTok has been target of a cyberattack that compromised several high-profile brand and celebrity accounts, including official accounts of news network CNN, Paris Hilton, and Sony, Forbes reported. The malware, delivered through direct messages (DMs) within the TikTok app, does not require any downloads, clicks, responses, or any other user actions beyond simply opening a message.
The compromised accounts have not been observed posting any unauthorized content as of yet. However, the extent of the impact remains unclear, and it is unclear how many accounts were affected.
TikTok spokesperson Alex Haurek said that the security team “is aware of a potential exploit targeting a number of brand and celebrity accounts” and it has taken measures to thwart the attack and prevent such incidents from occurring in the future.
Haurek noted that the number of compromised accounts was “very small,” though he did not provide specific numbers or detailed information on how TikTok is safeguarding other potentially exposed accounts. TikTok, which boasts over a billion users worldwide, is actively investigating the situation. Haurek did not say whether the hackers were still actively compromising accounts.