Comply with ZDNET: Add us as a preferred source on Google.
ZDNET’s key takeaways
- Hackers are stealing and promoting express pictures from social media accounts.
- The hackers use social engineering and different techniques to achieve entry.
- Keep away from posting any such pictures and be careful for potential hacking makes an attempt.
Storing sexually express pictures of your self on social media or private accounts isn’t a fantastic concept. That is very true now because the FBI is warning about hackers stealing and promoting such pictures.
In an advisory published on Monday, the FBI stated that sexual exploitation hackers are focusing on each adults and minors by illegally hacking into their social media and private accounts to seize express pictures. From there, the attackers promote the photographs on the darkish internet, usually accompanied by private particulars such because the sufferer’s identify, date of start, e mail handle, and telephone quantity.
Additionally: Why managers are ransomware’s top targets now – and 6 ways to stay safe
As soon as the non-public pictures and particulars are up for grabs on the darkish internet, a prison can exploit them to run sexual extortion (aka, sextortion) schemes during which they blackmail the focused individual. That re-victimizes the sufferer, inflicting them additional ache and grief.
Hackers sometimes use varied social engineering and cyber intrusion strategies to achieve entry to the social media and private accounts of their targets. In its advisory, the FBI highlighted three totally different techniques.
- Concentrating on passwords and PINs. Right here, the hackers begin with curated lists of internet sites which have suffered knowledge leaks. These lists sometimes embrace the names, birthdates, and different private particulars of customers. The hackers then flip to password-cracking software program and different brute-force instruments to attempt to get hold of passwords and PINs related to the leaked accounts.
- Impersonating customer support. With this tactic, a hacker sends textual content messages to social media customers, posing as the corporate’s customer support rep and claiming that the person’s account is being disabled or locked. From there, the hacker requests a password reset from the precise firm. After the person shares that code with the hacker, the sufferer’s password is reset, permitting the hacker to entry their account.
- Phishing makes an attempt. Typically, hackers will create domains and e mail accounts that impersonate customer support help from a social media firm. The hackers then ship emails to focused customers, warning them of latest logins to their accounts. These emails embrace a malicious hyperlink prompting the person to vary their password, thus permitting the hackers to achieve entry to their account.
Additionally: Your ChatGPT account just got more secure, but you have to opt in – here’s how
To keep away from turning into a sufferer of those schemes, the FBI affords the next suggestions:
- This is the primary rule. Do not retailer delicate pictures or movies on social media platforms or public web websites.
- Use distinctive and sophisticated passwords, passphrases, and PINs in your social media websites and private accounts. When creating passwords and passphrases, do not embrace any private info, corresponding to your date of start or your partner’s identify.
- When out there, join multi-factor authentication to confirm any login makes an attempt.
- Keep away from clicking on embedded hyperlinks in emails and textual content messages. As an alternative, go on to the web site in query to register to your account.
- Use a pc as a substitute of your cellular gadget to view an sudden or suspicious e mail. Right here, you possibly can hover over any embedded hyperlinks to search for atypical URLs or formatting irregularities.
- Watch out for those who obtain a short lived password, PIN reset, or entry code that you just did not request. By no means share login credentials with anybody, even when the sender claims to be from a social media website or different firm the place you’ve gotten an account. Use the corporate’s web site or app if it is advisable change your password or PIN.
