Blocked phishing attempts rose 83% in six months, according to Surfshark, largely due to one TikTok shop. Here’s how to spot the red flags.
TikTok Shop shoppers, beware: A counterfeit TikTok Shop generated over 320,000 phishing blocks between May and September 2026, or 19% of all global phishing domain blocks during that time, according to a Monday report from VPN provider Surfshark.
As of this month, the domain is still active — a worrisome sign as we approach the Black Friday shopping period.
Surfshark analyzed data from its web content blocker between April and September 2026, including block requests categorized by its tool as phishing, the domains associated with those requests, and the monthly number of devices with its phishing protection enabled globally.
Also: Suspicious calendar invite? It’s a trap – how the scam works
Even as the number of devices using Surfshark to protect against cyber threats expanded, phishing activity also grew massively: Monthly phishing blocks rose from 104,962 in April to 655,024 in September, a 524% increase.
During that time period, the number of protected devices rose by 241%, but blocks per Surfshark-protected device also rose 83%, from 0.74 to 1.35 — which means the growth in protected devices doesn’t fully explain the increase in phishing block requests.
The counterfeit TikTok Shop’s activity remained high in October: For the first 20 days of the month, it remained the most-blocked phishing domain, according to Surfshark’s data, accounting for 18% of the global phishing blocks during that time. The Surfshark report does not reveal the domain name.
Source link







