From TikTok to Takeover: How Viral Challenges Became a Backdoor for Spyware

A TikTok challenge called the “Filter Glitch” encouraged users to install a browser extension that secretly harvested session cookies and keystrokes. Promoted by influencers, the spyware spread to over 8 million users in a week. Security researchers traced it to a monetization scheme by a rogue ad tech startup.
Victims ranged from teenagers to small business owners. This signals a dangerous evolution in social malware, leveraging trust and trend virality to bypass security warnings. Platforms must step up vetting and browser vendors need more robust extension permission models.