In a nutshell: The FBI has issued a warning for anybody who likes to take express photographs (i.e., nudes) of themselves. Hackers are focusing on each grownup and underage customers by compromising their social media and private accounts to steal these photos and promote them on prison marketplaces – and so they typically embrace particulars concerning the victims.
The FBI’s warning issues what it calls sexual exploitation actors. These criminals goal particular individuals they’re concerned with, who could also be strangers or identified to them, in addition to opportunistic victims. As soon as inside an account, they seek for sexually express photographs and movies, steal them with out the proprietor’s data, and share them in neighborhood boards or promote them by way of illicit marketplaces.
Making an already nightmarish state of affairs worse, the stolen content material is usually accompanied by personally identifiable data such because the sufferer’s title, date of start, electronic mail deal with, telephone quantity, and social media username. This may result in repeated victimization by way of harassment, stalking, sextortion, and different focused assaults. Some criminals even promote the stolen materials by way of the sufferer’s personal social media account.
The FBI says attackers use a number of strategies to realize entry. One includes repeatedly attempting passwords and PINs primarily based on lists compiled from information breaches, social media, and different public sources. If the goal is thought, criminals might use birthdays, names, and variations of private particulars.
One other methodology begins with a textual content claiming the recipient’s social media account might be locked or disabled except they provide a verification code. The attacker concurrently requests a real password reset, inflicting the platform to ship the sufferer a code. Handing it over permits the prison to reset the password and take management.
There are additionally conventional phishing assaults involving emails from look-alike domains posing as social media assist. These warn of a brand new login and embrace a malicious hyperlink for altering the password.
A current instance illustrates simply how efficient these ways could be. Final month, an Illinois man obtained a 76-month jail sentence after sending pretend Snapchat assist texts to greater than 1,500 ladies. At the least 517 accounts had been compromised, permitting him to obtain nude or semi-nude photographs belonging to no less than 59 victims, Reuters reported.
Probably the most well-known instance, in fact, stays 2014’s Celebgate, aka The Fappening, when phishing assaults compromised a whole lot of iCloud and Gmail accounts, resulting in celebrities’ personal photos showing on-line.
The FBI recommends not storing delicate photos on internet-accessible companies, utilizing distinctive passphrases and PINs, enabling multi-factor authentication, and by no means sharing verification codes.
