The FBI has issued a warning about cybercriminals targeting social media accounts belonging to adults and children in an effort to steal intimate photographs and videos.

According to the agency, attackers commonly use social engineering, stolen credentials, and impersonation tactics to gain access to victims’ accounts.
Once they obtain private material, criminals may use it for extortion or distribute it publicly.

The FBI said victims can face continued harassment after an attack, including stalking, sextortion and attempts to promote or advertise stolen content through the victim’s own social media accounts.

Security experts say these incidents have existed for years, but the FBI’s latest warning highlights the continuing threat and the seriousness of the problem.

Rachel Tobac, chief executive of security-awareness company SocialProof Security, said young people, including boys, can be particularly vulnerable to these schemes.

The FBI said student-athletes are among those frequently targeted because their public profiles can make them easier to identify and approach.
Attackers may attempt to break into accounts using leaked passwords or credentials that victims have reused across multiple services.

Others impersonate representatives of social media companies, contacting users with claims that their accounts require verification or recovery.
Phishing is another common technique. Criminals can send convincing messages containing links to fake login pages hosted on domains designed to resemble legitimate social media websites.

Users who enter their credentials on these pages may unknowingly hand their passwords to attackers. The FBI recommends using unique passwords for different accounts and storing them with a reputable password manager.

Users should also enable multi-factor authentication wherever possible and be cautious of unsolicited messages from people claiming to represent technology companies.

The agency also advises users to think carefully about storing sensitive intimate material in online accounts, particularly where those accounts may be exposed if credentials are compromised.

The warning underscores the importance of stronger account security and greater awareness of social-engineering tactics, particularly for young users and anyone with a significant public presence online.

Source: TechCrunch