FBI: Hackers using social engineering to breach accounts and steal explicit content

The Federal Bureau of Investigation (FBI) has issued a stern warning about hackers infiltrating social media accounts to pilfer and sell users' nude photos. This malicious activity targets both adults and minors, often involving identifiable information that can result in further victimization through harassment, stalking, and sextortion. It's not just anyone, but specifically targeted individuals, both strangers and acquaintances, as well as opportunistic victims, who are at risk.

Criminals gain access to these accounts using multiple tactics. They attempt to crack passwords and PINs, often derived from data breaches, social media, and other public sources, or exploit personal details like birthdays and names. Another approach involves sending a fake notification claiming a user's social media account will be locked or disabled, requesting a verification code in return.

With this code, the attacker can change the password and seize control. Traditional phishing emails, appearing to be from legitimate social media support, are also a common tactic, leading victims to click malicious links and compromise their accounts.

A recent case in Illinois serves as a grim reminder of the effectiveness of these methods. An individual received 76 months in prison after sending fake Snapchat support texts to over 1,500 women, ultimately compromising 517 accounts and downloading nude or semi-nude photos from at least 59 victims.

The FBI advises against storing sensitive images on internet-accessible services, recommends the use of unique passphrases and PINs, enables multi-factor authentication, and warns against sharing verification codes with anyone.