The agency advised people to avoid storing sensitive images or videos on social media platforms.
Malicious actors are seeking to illegally access the social media and other personal accounts of underage children and adults in order to steal explicit content, according to the Federal Bureau of Investigation (FBI).
The threat actors share the content in various forums or post it for sale in criminal marketplaces, the FBI said in an Aug. 10 public service announcement alert.
In some cases, personally identifiable information such as names, phone numbers, social media usernames, and emails is posted alongside the explicit content. This exposes these victims to re-victimization, including sextortion and harassment.
The FBI detailed three tactics used by these malicious actors to illegally access victims’ accounts. The first involves high-volume password and PIN attempts on targeted accounts.
The second method involves impersonating social media customer service. In this tactic, the criminals send text messages to targets, claiming their social media account is being locked up or disabled unless they provide a verification code.
The malicious actors then request a password reset for the social media account. When the verification code is shared, the threat actor can use it to reset the target’s account password and gain access.
A third tactic involves phishing, where domains and email accounts mimicking social media customer support are set up. Targets are notified about so-called new logins to their accounts via official-looking emails. The emails contain a malicious embedded link, asking targets to change their password. If the individual clicks on the link, the criminal gains access to their account.
Earlier this year, an online predator pleaded guilty to carrying out sexual exploitation crimes, according to a Feb. 27 statement from the Department of Justice (DOJ).
The person hacked into the accounts of teens and young adults to steal their intimate and sexually suggestive images for the purpose of extortion, U.S. Attorney Theodore S. Hertzberg said in the statement.
In one incident, the criminal contacted a 20-year-old woman through an Instagram account that purportedly belonged to her male high school friend and sought her assistance in recovering his Snapchat account. The woman sent a code, which allowed the criminal to access her Snapchat account and steal private nude images and videos.
