Threat actors are exploiting a popular TikTok challenge, dubbed Invisible Challenge, to trick users into downloading info-stealing malware.