{"id":202664,"date":"2022-09-02T11:49:12","date_gmt":"2022-09-02T09:49:12","guid":{"rendered":"http:\/\/sftarticles.wpenginepowered.com\/en\/?p=202664"},"modified":"2025-07-01T20:28:52","modified_gmt":"2025-07-02T03:28:52","slug":"vulnerability-tiktok-android-app","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/vulnerability-tiktok-android-app\/","title":{"rendered":"Vulnerability in TikTok’s Android app was allowing attackers to secretly access user accounts"},"content":{"rendered":"\n

TikTok is a hot topic these days with politicians all over the Western World frothing at the mouth at the possibility of the Chinese app getting its hands on their citizens\u2019 data. There are other security concerns that need to be taken seriously, however, such as the more traditional cybersecurity issues we regularly report on here at Softonic. Today we have news of a vulnerability in the TikTok app for Android<\/strong> that has been allowing attackers to secretly access users\u2019 data. Let\u2019s go through the details now:<\/p>\n\n\n

\r\n
\r\n
\r\n
\r\n \"TikTok\"\r\n <\/div>\r\n
\r\n TikTok<\/span>\r\n Download Now<\/a>\r\n <\/div>\r\n
\r\n <\/path><\/path><\/text><\/svg>\r\n <\/div>\r\n <\/div>\r\n
\r\n <\/span>\r\n <\/div>\r\n
\r\n \r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n\n\n\n

It is a popular method for cybersecurity and antivirus specialists to raise the profile of their products by reporting on security vulnerabilities they have uncovered. This is even the same for security researchers at software giants like Microsoft. The Microsoft Defender 365 Research Team has release<\/a>d<\/a> a report<\/a> exposing a security vulnerability in the TikTok Android app that \u201ccould lead to one-click account hijacking\u201d<\/strong>.<\/p>\n\n\n\n

Fortunately, although the vulnerability was active for a period of time, it was quite complex and required a chain of multiple issues to occur at once<\/strong>, in order for the exploit to be taken advantage of. This means that the vulnerability has now been closed before any seeming exploits have been actioned.<\/p>\n\n\n\n

This is great news because although it would have been difficult to exploit, the vulnerability was quite serious<\/strong>, with the Defender 365 team reporting:<\/p>\n\n\n\n

\u201cThe vulnerability allowed the app\u2019s deeplink verification to be bypassed. Attackers could force the app to load an arbitrary URL to the app\u2019s WebView, allowing the URL to then access the WebView\u2019s attached JavaScript bridges and grant functionality to attackers.\u201d<\/em><\/p>\n\n\n\n

Once again, a security issue is highlighting the need for vigilance<\/strong> when you are online. It is more important than ever to take care whenever you are clicking links or downloading files. As always in these cases, we recommend you refer to our phishing scam and fake link infographic<\/a> every time you come across something suspicious.<\/p>\n\n\n\n

Image via: Flickr<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

TikTok is a hot topic these days with politicians all over the Western World frothing at the mouth at the possibility of the Chinese app getting its hands on their citizens\u2019 data. There are other security concerns that need to be taken seriously, however, such as the more traditional cybersecurity issues we regularly report on … Continue reading “Vulnerability in TikTok’s Android app was allowing attackers to secretly access user accounts”<\/span><\/a><\/p>\n","protected":false},"author":9073,"featured_media":202670,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[1015],"tags":[2336],"usertag":[],"vertical":[],"content-category":[],"class_list":["post-202664","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-app-subdomain-redirectiontik-tok"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/202664","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/9073"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=202664"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/202664\/revisions"}],"predecessor-version":[{"id":323264,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/202664\/revisions\/323264"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/202670"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=202664"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=202664"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=202664"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=202664"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=202664"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=202664"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}