Hackers are posting TikTok videos that promise a free Spotify Premium subscription. The clips direct viewers to a shortened link that downloads a command‑line tool. That tool installs a credential‑stealer which captures login data and sends it to a remote server.
The scheme was first observed in early June 2026 and has already netted dozens of victims, according to security monitoring firms. By using TikTok’s algorithmic reach, the attackers exploit the platform’s popularity among music listeners to spread a low‑profile malware dropper.
The impact is limited to stolen passwords, but the ease of distribution shows how social‑media hype can be weaponised. TikTok has not issued a public comment, and the videos remain online pending removal.
Source: TechRadar, 11 June 2026, https://www.techradar.com/pro/security/hackers-are-using-tiktok-videos-offering-free-spotify-premium-to-spread-malware-and-steal-passwords