This TikTok thirst trap tricks people into downloading malware

The latest trend on TikTok is the “invisible body” challenge, where users post nude videos that look like themselves with filters obscured. Naturally, some users were curious if there was a way to remove the filter from the above video to reveal the uploader’s naked body, and needed third-party software to do it. is downloading.

We hate to be the bearer of bad news, but there is no way to “unfilter” downloaded TikTok videos. However, opportunistic hackers have jumped on the trend and are distributing fake apps called “TikTok unfilters.” This app claims to decode the invisible body his filter. Really, it just infects your device with malware.

A literal thirst trap

Scammers promote fake apps in TikTok videos that link to a Discord server called “Space unfilter.” The server then directs her to her GitHub download page. To make it look real, the hacker actually cloned the GitHub project, but modified it to install the “WASP Stealer” malware.

WASP Stealer is a particularly dangerous piece of malware. Once installed on the device, it can copy financial information from browsers, hijack Discord login credentials, and even steal cryptocurrencies and locally stored files. Bleeping Computer has a complete breakdown of how the malware works If you’re interested in gory details.

According to a report by cybersecurity firm Checkmarx, TikTok banned at least two profiles promoting the Space Unfiltered Discord server, but none of them managed to garner more than 1 million combined views. The Discord server had at least 32,000 users at one point, and the TikTok Unfilter repository got enough downloads to rank on GitHub’s trending projects list. The server was also shut down, but it’s possible that the hackers just created a new community instead and it’s still active.

too good to be real

Despite the real threat this malware poses to TikTok users, it can be easily avoided. Don’t click on links that promise to discover someone’s “nude” videos. Impossible anyway. TikTok only recorded his one version of the video, it is filtered and cannot be deleted. There is no hidden “naked data” that the app can reveal, even if you were completely naked when you took the picture. please think about it. If such a thing were possible, it would be a legal nightmare for TikTok. I think you should use your imagination instead or try one of the many safer and legal ways to find naked people on the internet.

That being said, if you have already downloaded an unfilter app, you may have downloaded malware. Use a reputable antimalware app to delete files, update passwords everywhere, and monitor your Discord profile, bank accounts, and credit reports for strange activity.

[Bleeping Computer]