FBI Warns Cybercriminals Are Hacking Social Media Accounts to Steal Intimate Media
The Federal Bureau of Investigation has issued a public warning regarding cybercriminals breaching social media accounts to access and steal intimate explicit photographs and videos belonging to adults and minors.
What Happened
According to an advisory from the FBI, malicious actors are using social engineering, brute-force password techniques, and phishing schemes to compromise online accounts. Once access is gained, attackers extract private visual content and frequently subject targets to extortion, stalking, and continuous harassment. In several reported cases, perpetrators have advertised the stolen material directly onto the victims’ personal profiles or published it across the internet.
The bureau highlighted that student-athletes are frequently singled out by attackers because of their visible public profiles. Rachel Tobac, CEO of security awareness training firm SocialProof Security, noted that these campaigns heavily target young boys and represent a serious public health issue, pointing out that some victims have been driven to self-harm due to the severe distress caused by these attacks.
Key Highlights
- Targeted Demographics: The FBI confirmed both adults and children are targeted, with student-athletes frequently selected due to their public presence, while experts observe high targeting rates among young boys.
- Common Attack Tactics: Attackers use leaked or reused credentials for brute-force logins, send phishing emails pointing to fraudulent login domains, and pose as customer support representatives claiming account recovery is needed.
- Severe Victim Impact: Victims face sextortion, public exposure of private images, stalking, and re-victimization via unsolicited advertisements on their own pages.
- Security Recommendations: Users are advised to enable multi-factor authentication, maintain unique passwords via password managers, distrust unsolicited customer support communications, and refrain from storing sensitive private media in cloud or online accounts.
Why This Matters
The FBI’s decision to issue a public advisory suggests these compromise and extortion tactics may be escalating. Because attackers exploit social engineering and reused credentials, basic security practices such as avoiding duplicate passwords and treating unsolicited support requests with caution remain critical to preventing unauthorised account access and subsequent extortion.
What to Watch Next
Users and account holders are encouraged by authorities to review their security setups by implementing password managers, turning on multi-factor authentication, and removing private sensitive images from online storage environments.
Frequently Asked Questions
How do attackers gain access to social media accounts?
Cybercriminals rely on brute-force attempts using previously leaked passwords, fake login pages distributed via phishing emails, and social engineering tricks where they impersonate platform support staff offering account recovery.
Who is being targeted in these campaigns?
Both adults and children are targeted. The FBI specifically identified student-athletes as frequent targets due to their public visibility, while cybersecurity experts note significant targeting of young boys.
How can users protect their accounts from these breaches?
Recommended safety steps include enabling multi-factor authentication, using strong and unique passwords managed by a password manager, remaining skeptical of unsolicited messages claiming to be from tech support, and avoiding storing explicit personal imagery in online accounts.
Source: TechCrunch and FBI / IC3 Public Service Announcement.