{"id":173504,"date":"2025-08-05T17:05:55","date_gmt":"2025-08-05T16:05:55","guid":{"rendered":"https:\/\/cms-articles.softonic.io\/es\/?p=392166"},"modified":"2025-08-05T17:06:55","modified_gmt":"2025-08-05T16:06:55","slug":"attention-aux-liens-de-tiktok-car-ils-pourraient-etre-utilises-pour-voler-vos-donnees","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/fr\/attention-aux-liens-de-tiktok-car-ils-pourraient-etre-utilises-pour-voler-vos-donnees\/","title":{"rendered":"Attention aux liens de TikTok, car ils pourraient \u00eatre utilis\u00e9s pour voler vos donn\u00e9es"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Des chercheurs en cybers\u00e9curit\u00e9 ont d\u00e9couvert une vaste campagne malveillante qui cible les utilisateurs de TikTok Shop \u00e0 l&#8217;\u00e9chelle mondiale, dans le but de voler des identifiants et de distribuer des applications malveillantes. <strong>La soci\u00e9t\u00e9 de cybers\u00e9curit\u00e9 CTM360 a nomm\u00e9 cette op\u00e9ration ClickTok, mettant en \u00e9vidence comment les acteurs de la menace exploitent la plateforme de commerce \u00e9lectronique \u00e0 travers une strat\u00e9gie duale combinant phishing et malware<\/strong>.<\/p>\n\n\n<h2 class=\"wp-block-heading\">Une arnaque pas tr\u00e8s sophistiqu\u00e9e, mais tr\u00e8s efficace<\/h2>\n\n\n<p class=\"wp-block-paragraph\">Plus de 15 000 domaines imitant des URL l\u00e9gitimes de TikTok ont \u00e9t\u00e9 identifi\u00e9s, beaucoup d&#8217;entre eux h\u00e9berg\u00e9s sur des domaines de premier niveau comme .top, .shop et .icu. <strong>Ces sites frauduleux sont con\u00e7us pour tromper les utilisateurs, leur faisant croire qu&#8217;ils interagissent avec la plateforme officielle ou avec des affili\u00e9s l\u00e9gitimes<\/strong>. Les pages de phishing attirent les utilisateurs \u00e0 d\u00e9poser des cryptomonnaies dans des boutiques frauduleuses, en offrant des r\u00e9ductions et des produits inexistants.<\/p>\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Dancing for the Devil: The 7M TikTok Cult | Official Trailer | Netflix\" width=\"840\" height=\"473\" src=\"https:\/\/www.youtube.com\/embed\/-CCG5RXbtwc?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n<p class=\"wp-block-paragraph\">Le c\u0153ur de cette campagne implique l&#8217;utilisation d&#8217;une application malveillante contenant un malware connu sous le nom de SparkKitty. Ce malware a la capacit\u00e9 de collecter des donn\u00e9es des appareils Android et iOS, ainsi que d&#8217;analyser des portefeuilles de cryptomonnaies. <strong>Les utilisateurs qui t\u00e9l\u00e9chargent cette application sont amen\u00e9s \u00e0 saisir leurs identifiants de connexion, seulement pour faire face \u00e0 des \u00e9checs qui les redirigent vers une connexion alternative via Google<\/strong>.<\/p>\n\n\n<p class=\"wp-block-paragraph\">De plus, un autre type de phishing ciblant les utilisateurs de Meta Business Suite a \u00e9t\u00e9 identifi\u00e9, \u00e0 travers de faux courriels alertant sur des violations de politiques. <strong>Le r\u00e9seau de lutte contre les crimes financiers du d\u00e9partement du Tr\u00e9sor am\u00e9ricain a exhort\u00e9 les institutions financi\u00e8res \u00e0 rester vigilantes face aux activit\u00e9s suspectes li\u00e9es aux kiosques de monnaie virtuelle convertible<\/strong>, alors que les criminels continuent de tirer parti des technologies innovantes pour commettre des fraudes.<\/p>\n\n<div class=\"sc-card-program\">\r\n  <div class=\"sc-card-program__body\">\r\n    <div class=\"sc-card-program__row clearfix\">\r\n      <div class=\"sc-card-program__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-program__img\" src=\"https:\/\/images.sftcdn.net\/images\/t_app-icon-s\/p\/25d01a14-3485-42e7-a253-e5050ac51dd1\/1217029392\/tik-tok-Download-Tiktok.jpg\" alt=\"TikTok\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-title\">\r\n        <span class=\"sc-card-program__title\">TikTok<\/span>\r\n        <a class=\"sc-card-program__button sc-card-program-internal\" href=\"https:\/\/tik-tok.softonic.com\/android\" target=\"_self\" rel=\"noopener noreferrer\">T\u00c9L\u00c9CHARGER<\/a>\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-rating\">\r\n        \r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <span class=\"sc-card-program__description\"><\/span>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <img decoding=\"async\" class=\"sc-card-program__bigpic\" src=\"\">\r\n    <\/div>\r\n    <a class=\"sc-card-program__link track-link sc-card-program-internal\" href=\"https:\/\/tik-tok.softonic.com\/android\" target=\"_self\" rel=\"noopener noreferrer\"><\/a>\r\n  <\/div>\r\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Des chercheurs en cybers\u00e9curit\u00e9 ont d\u00e9couvert une vaste campagne malveillante qui attaque des utilisateurs de TikTok Shop \u00e0 l&#8217;\u00e9chelle mondiale, dans le but de voler des identifiants et de distribuer des applications malveillantes. La soci\u00e9t\u00e9 de cybers\u00e9curit\u00e9 CTM360 a nomm\u00e9 cette op\u00e9ration ClickTok, mettant en \u00e9vidence comment les acteurs de la menace exploitent la plateforme de commerce \u00e9lectronique \u00e0 travers une strat\u00e9gie duale combinant phishing et malware. Une arnaque peu sophistiqu\u00e9e, mais tr\u00e8s efficace Plus de 15 000 domaines imitant des URL l\u00e9gitimes de TikTok ont \u00e9t\u00e9 identifi\u00e9s, beaucoup d&#8217;entre eux h\u00e9berg\u00e9s sur des domaines de premier niveau comme .top, .shop et [&hellip;]<\/p>\n","protected":false},"author":9318,"featured_media":173505,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[16761,22339],"tags":[25905,25906,25907,17677,25908,25909,148,64,17060,25910,25911],"usertag":[],"vertical":[],"content-category":[18042,18130],"class_list":["post-173504","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-softwaresecurity","tag-icu","tag-shop","tag-aplicacion-maliciosa","tag-ciberseguridad","tag-clicktok","tag-ctm360","tag-google","tag-malware","tag-tiktok","tag-u-s-department-of-the-treasurys-financial-crimes-enforcement-network","tag-url-legitimas","content-category-seguridad-privacidad","content-category-streaming-videos"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/posts\/173504","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/users\/9318"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/comments?post=173504"}],"version-history":[{"count":2,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/posts\/173504\/revisions"}],"predecessor-version":[{"id":173517,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/posts\/173504\/revisions\/173517"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/media\/173505"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/media?parent=173504"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/categories?post=173504"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/tags?post=173504"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/usertag?post=173504"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/vertical?post=173504"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/content-category?post=173504"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}