FBI warns hackers steal nude photos via social media
FBI warns hackers are breaking into social media accounts to steal and sell users’ nude photos, a disturbing trend targeting both adults and minors. The agency has issued a warning regarding sexual exploitation actors who compromise social media and personal accounts to steal explicit images and videos, often accompanied by personally identifiable information.
How the theft occurs
Attackers use several methods to gain access to these accounts. One common tactic involves repeatedly trying passwords and PINs based on lists compiled from data breaches and public sources. If the target is known, criminals use birthdays, names, and variations of personal details to guess the correct credentials.
Another method begins with a text claiming the recipient’s social media account will be locked or disabled unless they supply a verification code. The attacker simultaneously requests a genuine password reset, causing the platform to send the victim a code. Handing it over allows the criminal to reset the password and take control.
Related: Amazon Data Center to Top US Polluters
Traditional phishing attacks also play a role, with emails from look-alike domains posing as social media support. These emails warn of a new login and include a malicious link for changing the password.
The consequences extend beyond stolen images
The stolen content is often accompanied by personally identifiable information such as the victim’s name, date of birth, email address, phone number, and social media username. This can lead to repeated victimization through harassment, stalking, sextortion, and other targeted attacks. Some criminals even advertise the stolen material through the victim’s own social media account.
The FBI notes that criminals target specific people they are interested in, who may be strangers or known to them, as well as opportunistic victims. Once inside an account, they search for sexually explicit photos and videos, steal them without the owner’s knowledge, and share them in community forums or sell them through illicit marketplaces.
It is worth noting that while the FBI focuses on active exploitation actors, the infrastructure for selling stolen content has become surprisingly resilient. Criminals have adapted to platform bans and legal pressure by shifting to encrypted messaging apps and decentralized marketplaces, making enforcement significantly more difficult for law enforcement agencies.
Related: Florida Man Arrested for Crypto Theft Scheme
Legal consequences and recommendations
A recent example illustrates just how effective these tactics can be. Last month, an Illinois man received a 76-month prison sentence after sending fake Snapchat support texts to more than 1,500 women. At least 517 accounts were compromised, allowing him to download nude or semi-nude photos belonging to at least 59 victims, Reuters reported.
The most famous example, of course, remains 2014’s Celebgate, aka The Fappening, when phishing attacks compromised hundreds of iCloud and Gmail accounts, leading to celebrities’ private images appearing online.
The FBI recommends not storing sensitive images on internet-accessible services, using unique passphrases and PINs, enabling multi-factor authentication, and never sharing verification codes.
