Cybercriminals are breaking into social media and personal accounts to steal intimate photos and videos. The FBI’s Internet Crime Complaint Center issued an alert on August 10 describing the pattern. Attackers post the material online, sell it through criminal marketplaces, or use it to keep exploiting the victim after the account is compromised. Both adults and minors are targeted.
The same warning sits alongside an FBI and NCAA initiative focused on student-athletes. Public profiles can supply offenders with extra personal details and greater perceived leverage.
How Attackers Gain Account Access
Many of the methods are already familiar. Criminals work with personal information that has already leaked in earlier breaches and then try passwords or PINs tied to those details. Others rely on phishing pages or fake support messages to trick people into handing over access.
A message that appears to come from legitimate customer support may claim there is a problem with the account and ask for a verification or password-reset code. Once that code is supplied, the attacker can take control. A convincing phishing page produces the same outcome.
Steps That Make These Attacks Harder
The FBI recommends unique passwords and PINs, multi-factor authentication, and credentials that do not rest on personal details someone could easily find. Unexpected support messages deserve extra scrutiny. Open the service through its official app or website instead of following a link in a text or email. If a verification code arrives when none was requested, do not give it to anyone claiming to represent the platform.
For especially sensitive material, the FBI also advises against storing it on social media or other internet-accessible services.
What to Do If You Are Targeted
Preserve relevant messages and images, stop communicating with the offender, and report the incident through IC3.gov. Do not pay an attacker or send additional material in the hope of stopping distribution.
Once intimate content is loose online, regaining control can be extremely difficult. Strong account security is worth the small inconvenience when the files behind that login are this personal.