CARTELS RECRUIT ON TIKTOK USING CODED LANGUAGE
INDUSTRY DESK■ 1 MIN READ
MON, MAY 25, 2026■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
Mexican drug cartels are leveraging TikTok to recruit members and spread propaganda, using coded language to evade platform moderation, according to researchers.
The social media platform has become a recruiting ground for criminal organizations seeking to build networks and amplify messaging to younger audiences. Cartels employ coded terminology and obscured references that slip past automated content moderation systems, making detection difficult.
Researchers tracking the activity report that cartels use TikTok to glorify gang life, announce territorial claims, and target potential recruits. The platform's algorithm, designed to boost engagement, inadvertently amplifies this content to wider audiences.
TikTok's content moderation challenges extend beyond this issue, with the platform already facing scrutiny over harmful content proliferation. The company has not disclosed specific actions taken against cartel-related accounts.
The trend underscores how criminal organizations adapt to digital platforms faster than moderation systems can respond, creating a persistent security concern for both the platform and Mexican authorities combating organized crime.
■ MORE FROM THE SECURITY DESK
Cybercriminals have transformed DDoS attacks into a polished, commercialized service complete with pricing tiers, customer support, and reseller programs. The DDoS-as-a-Service market has evolved from basic tools into sophisticated attack platforms.
9H AGO— Industry Desk
Microsoft faced backlash after threatening a security researcher with criminal investigation, reigniting debate over software vulnerability disclosure practices and corporate responsibility.
9H AGO— Security Desk
Google is deploying Device Bound Session Credentials (DBSC) to all Chrome users, a security feature designed to prevent account takeovers by protecting session cookies from theft.
9H AGO— Industry Desk
Dutch authorities have dismantled a major botnet comprising 17 million infected devices and seized over 200 servers hosting the operation at a local provider.
9H AGO— Security Desk