section_path: Privacy and security concerns/Software code
section_name: Software code
paragraph_text: Software code
  
  In January 2020, Check Point Research discovered a vulnerability through which a hacker could spoof TikTok's official SMS messages and replace them with malicious links to gain access to user accounts. It was later patched by TikTok. In August 2020, The Wall Street Journal reported that TikTok tracked Android user data, including MAC addresses and IMEIs, with a tactic in violation of Google's policies.
  
  In August 2022, software engineer and security researcher Felix Krause found that in-app browsers from TikTok and other platforms contained codes for keylogger functionality but did not have the means to further investigate whether any data was tracked or recorded. TikTok said that the code is disabled.
  
  In January 2020, Check Point Research discovered a vulnerability through which a hacker could spoof TikTok's official SMS messages and replace them with malicious links to gain access to user accounts. It was later patched by TikTok. In August 2020, The Wall Street Journal reported that TikTok tracked Android user data, including MAC addresses and IMEIs, with a tactic in violation of Google's policies.
  
  In August 2022, software engineer and security researcher Felix Krause found that in-app browsers from TikTok and other platforms contained codes for keylogger functionality but did not have the means to further investigate whether any data was tracked or recorded. TikTok said that the code is disabled.