The FBI has issued a warning that cybercriminals are increasingly hacking into the social media accounts of both adults and children to steal explicit intimate images and videos. The advisory highlights that these attackers primarily use social engineering tactics to target victims, who often face extortion or find their stolen content published online without consent.
“Victims often face re-victimization through harassment, sextortion, stalking or other targeted attacks, such as advertising stolen content on a victim’s own social media page,” the FBI stated in its public alert, released in 2026.
While such crimes have been documented for years, the FBI’s decision to issue a dedicated alert may signal a recent surge in incidents. Rachel Tobac, CEO of the security awareness training firm SocialProof Security, noted that these attacks disproportionately target young boys and described the issue as "a big public health issue," given that some victims have been driven to self-harm in response to the threats. The FBI did not respond to TechCrunch’s request for additional comment.
The advisory outlines several common methods used by attackers, including:
- Brute-forcing accounts using leaked or previously compromised passwords.
- Impersonating customer service representatives, often pretending to work for platforms like Instagram to trick users into revealing credentials.
- Phishing emails that direct targets to fake login pages using domains that closely mimic legitimate social media sites.
- Account recovery scams, where attackers contact victims claiming they need to regain access to their own accounts.
To reduce the risk of compromise, the FBI recommends:
- Using unique, complex passwords for each account and storing them in a trusted password manager.
- Enabling multi-factor authentication (MFA) on all online accounts.
- Treating unsolicited messages from alleged tech company representatives with skepticism, as legitimate companies rarely initiate direct contact.
- Avoiding the storage of sensitive or intimate images in cloud-based online accounts.
As digital threats evolve, adopting these security measures is critical for protecting personal privacy, especially for vulnerable populations like minors. Staying vigilant and informed is the first line of defense against these invasive attacks.
via TechCrunch