FBI Warns Hackers Are Stealing Intimate Photos From Online Accounts

The FBI is warning that cybercriminals are breaking into victims’ social media and online accounts to steal intimate images and videos, which can then be used for sextortion, harassment and other targeted attacks.

The bureau said attackers are targeting both adults and children, often using social engineering techniques or compromised passwords to gain access to private accounts and stored content.

“Victims often face re-victimization through harassment, sextortion, stalking or other targeted attacks, such as advertising stolen content on a victim's own social media page,” the FBI said.

FBI warns of attacks targeting intimate photos

The FBI said student-athletes are frequently targeted because their public profiles can make them more visible to cybercriminals. Security experts have also warned about sextortion schemes targeting young people, including boys.

Rachel Tobac, CEO of security awareness training company SocialProof Security, said these types of attacks have existed for years. Still, the FBI’s decision to issue a public warning could indicate that incidents are increasing.

In some cases, attackers threaten to distribute stolen material unless victims meet their demands. Stolen images may also be published online or used to subject victims to further harassment and stalking.

Hackers use phishing and stolen passwords

According to the FBI, attackers use several methods to compromise accounts. Some attempt to break into accounts using passwords exposed in previous data breaches or credentials that victims have reused across multiple services.

Others impersonate customer support representatives from Instagram or other social media platforms. They may contact a target claiming there is a problem with an account and direct the person to a fraudulent login page designed to steal credentials.

Phishing emails can similarly use domains that closely resemble legitimate social media websites, making fraudulent login pages appear authentic.

FBI recommends stronger account security

The FBI advises people to use a unique password for every account and store passwords in a password manager. Users should also enable multi-factor authentication wherever it is available, adding another barrier if a password is compromised.

People should be cautious when receiving unsolicited messages from anyone claiming to represent a social media or technology company, particularly if the person requests passwords, verification codes or account credentials.

The FBI also recommends avoiding the storage of intimate images in online accounts, reducing the amount of sensitive material that could be exposed if an account is compromised.