The FBI warns of hackers trying to hijack users' sensitive photos

(Dan Tri) - The FBI warns that cybercriminals are trying to gain access to online accounts to steal private, sensitive images, then distribute, buy, sell or use to blackmail victims.

Hackers are looking to take private and sensitive photos of users for blackmail (Illustration: GMN).

According to the FBI's warning, criminals are targeting social network accounts of both adults and juveniles. After taking over the account, they can search for private images, videos and personal information of the victim.

This content can then be distributed, bought and sold on underground markets or used to threaten and blackmail victims.

The FBI warns that the theft of private images and videos can take place without the victim's knowledge. When obtaining sensitive content, bad actors can directly contact the victim, threatening to distribute the images if this person does not meet the requirements.

Subjects can also collect victims' personal information from social network accounts. Full name, date of birth, email address, phone number and other data can be used to apply pressure or harass or threaten.

One of the methods used is to take advantage of leaked usernames and passwords from previous data leaks to find ways to access other accounts.

IC3, the FBI's Internet crime complaint center, lists password mining, using leaked credentials, phishing scams and impersonating technical support staff as common methods for account takeovers.

Social media platforms can use a variety of measures to prevent unauthorized logins, such as limiting the number of incorrect password attempts or requiring users to perform an additional authentication step.

However, bad actors also find ways to bypass these measures through fraud. They can impersonate the social network's customer support staff, send emergency notifications, and ask users for passwords, PINs, or authentication information.

Another trick is to create fake websites with domain names and interfaces similar to the real service. The bad guy sends an email or text message warning that the victim's account has a problem, then requires the user to log in to restore the account.

If users enter their username and password on these fake websites, the information could be passed on to the attacker. This is a common form of online fraud aimed at taking over accounts.

Once an account is taken over, a bad actor can change the password, recovery information or other security settings, making it difficult for the account owner to regain access.

According to the FBI, private images and videos shared online can be copied or stolen and then used for blackmail and harassment. The agency recommends that users limit the disclosure of personal information, be cautious with online contacts, and use separate passwords and multi-factor authentication for important accounts.

Users also need to be wary of emails and messages asking to log in or provide authentication information. The FBI recommends not accessing suspicious links and not giving out passwords or authentication codes to others.