Phishing Campaigns Hijack Messaging Accounts

Threat actors are using impersonation, personalized warnings, fake support messages, and reverse-proxy phishing pages to seize messaging and business accounts without necessarily exploiting vulnerabilities in the underlying platforms.

The campaigns target activists, officials, military personnel, politicians, ordinary users, and TikTok for Business operators, with techniques including one-time-code theft, session-cookie capture, device profiling, and bot evasion. Compromised accounts could expose sensitive communications or be used for fraud, malvertising, and malicious content distribution.