A viral trend circulating on TikTok and X (formerly Twitter) in Indonesia under the title “Video Viral Teh Pucuk Durasi 17 Menit” has raised serious cybersecurity concerns.
While the title references Teh Pucuk Harum, a popular jasmine tea, experts warn that the trend is being used as bait in a so-called “ghost file” scam aimed at stealing personal data and infecting devices.
The visual hook and fake ‘17-minute’ claim
Short clips and screenshots circulating online reportedly show a woman sitting on a bed, with a bottle of Teh Pucuk visible in the frame. As the woman is unidentified, users began referring to the clip by the tea brand.
Cybersecurity analysts say the claim of a “17-minute full video” is unverified and appears to be a fabricated curiosity tactic designed to lure users into clicking suspicious links.
Phishing and malware risks
Authorities have flagged links promising the “full version” as high-risk. These links allegedly lead to:
- Fake login pages designed to steal social media credentials
- Malware downloads that can install spyware on Android and iOS devices
- Redirects to illegal online gambling sites
Users are advised not to search for or click on links related to the trend, especially from unknown accounts on TikTok, X, Telegram or file-sharing platforms.
University clarification
Rumours briefly linked the video to students of the University of Mataram. However, the institution publicly denied any connection and urged the public to refrain from spreading unverified claims.
Cyber experts stress that the viral narrative is a classic example of malware baiting, where curiosity is exploited to facilitate cybercrime.
Official advice:
Avoid searching the term, do not click suspicious links, and report accounts sharing potentially harmful content through platform reporting tools.