Hackers are breaking into users’ social accounts to steal private photos, FBI warns: How to stay safe

The FBI has warned about hackers breaking into users’ social media and personal accounts to steal sexually explicit photos and videos. According to the agency, hackers are targeting both adults and minors. They are said to be sharing the stolen content on online forums or selling it through illegal marketplaces. In some cases, hackers also share victims’ personal details, including name, phone number, email and social media username. This can expose victims to harassment, stalking, sextortion and other targeted attacks.

How hackers are getting into users’ social accounts

According to the FBI, hackers are using different methods to get access to victims’ social media and other personal accounts. One method is trying large numbers of passwords and PINs. Criminals may collect personal information from leaked databases, social media profiles and other online sources. They can then use details such as names and birth dates to guess passwords or PINs.

Another method is pretending to be social media customer support. Hackers may send a message claiming that the victim’s account is about to be locked or disabled. They then ask the victim to share a verification code, which they can use to reset the password.

Another method is phishing where attackers create fake emails and websites that look like official social media services. The message may warn about a suspicious login and ask the user to change their password through a provided link. Once clicked, hackers get access to the victim’s account.

Also read: Apple Pay chief retiring after over 25 years at company, more exec departures may follow 

How to stay safe

• Avoid storing sensitive photos and videos on social media platforms or other internet-accessible sites.
• It is advised to use a different and strong password for every important account. Avoid using names, birthdays or other personal details in passwords and PINs.
• Always enable multi-factor authentication.
• Be careful with links sent through emails and text messages. If you receive a warning about your account, open the platform’s official app or website yourself instead of clicking the link.
• Never share a temporary password, verification code or password-reset code with someone who contacts you. If you receive a code you did not request, check your account and change your password through the official app or website.

Also read: OpenAI launches GPT 5.6 Cyber AI model, expands cybersecurity service Daybreak