Inside the TikTok Cyber Heist: How Teen Hackers Used AI to Crack MFA

Teen hackers from Eastern Europe bypassed multi-factor authentication on TikTok by creating AI voice clones to impersonate account owners and manipulate customer support agents.

The operation targeted influencers with millions of followers. Using AI-generated voice scripts and deepfake video, attackers persuaded support reps to reset credentials. This highlights a major flaw in support-driven identity recovery systems. MFA alone is no longer enough when human fallibility is involved.
Platforms must adopt biometric MFA, customer service hardening, and anomaly-based access
controls to avoid these social-engineering escalations.