FBI warns hackers steal private photos and extort account owners
The FBI has issued a warning about a new wave of attacks in which cybercriminals break into social media and personal accounts to steal explicit images. The stolen material is then sold on the dark web, often bundled with the victim's personal details: name, date of birth, email address, and phone number. Buyers of such databases use the photos for sextortion, threatening to release them unless the victim pays.
According to an advisory published on Monday, both adults and minors are at risk. The bureau highlighted three main attack schemes. In the first, attackers rely on lists of websites that have already suffered data breaches. Using passwords and personal details from those leaks, they attempt to crack the victim's other accounts with brute-force software.
The second method involves impersonating customer support. A hacker sends an SMS posing as the company, claiming the account is being disabled or locked. The attacker then requests a password reset from the real service and asks the victim for the code under the guise of "restoring access." Once the code is shared, the hacker changes the password and takes full control of the profile.
The third approach is phishing. Criminals create fake domains and email addresses that mimic official social media support and send messages asking victims to click a link and enter their credentials. This way, users hand over their login and password directly to fraudsters.
The FBI advises against storing compromising images in cloud services or on internet-connected devices and warns not to post them on social media. The agency recommends using strong, unique passwords for every account, enabling two-factor authentication, and avoiding links in suspicious messages. If an attack has already occurred, victims should change passwords immediately, contact the platform's support team, and report the incident to law enforcement. Paying the extortionists is discouraged, as it does not guarantee deletion of the material and only invites further demands.
