FBI Warns of Social Engineering Used to Steal Explicit Content from Social Media Accounts
Summary
The FBI says hackers use password guessing, fake support scams and cloned login pages to steal explicit content from social media accounts, which may then be sold or used for harassment, sextortion and stalking.
Key points
- The FBI says attackers target adult and child social media accounts to steal explicit content and personal information.
- Attackers may guess passwords or PINs using information from data leaks or details such as a victim’s name or birthday.
- Fake support messages can prompt victims to reset passwords or share codes that enable account takeover.
- Cloned social media login pages are used to capture credentials.
- Stolen content may be sold or posted alongside personal information; victims may face harassment, sextortion or stalking.
- The article cites related DOJ cases involving Snapchat accounts and student-athlete data, as context for similar activity.
Article Details
- Event Type
- FBI alert about social engineering and account-intrusion tactics used to compromise social media accounts.
- Impact
- Attackers steal explicit content and personal information, sell or post the material, and may subject victims to harassment, sextortion, stalking, and further abuse.
MITRE ATT&CK
T1056.003 · Web Portal CaptureThe alert says cloned social media login pages capture credentials entered by victims.T1110.001 · Password GuessingThe alert describes attackers repeatedly trying different passwords or PINs to access accounts.T1656 · ImpersonationThe alert describes attackers impersonating social media company representatives to persuade victims to reset passwords or provide reset codes.