FBI Warns of Rising Sextortion Schemes Targeting Social Media Accounts
The FBI has issued a public alert warning that cybercriminals are increasingly targeting adults and children by hijacking social media and online accounts to steal sexually explicit images or videos. These attackers then use the stolen content for blackmail, threatening to leak it publicly or share it with victims’ contacts unless demands often financial are met. In some cases, the material is sold on criminal marketplaces, sometimes alongside victims’ personal details, such as names, birthdates, and social media handles, which can be used to coerce further exploitation.
The agency highlighted that victims frequently face ongoing harassment, stalking, or additional attacks, including the unauthorized posting of stolen content on their own social media profiles. The warning follows a joint alert from the FBI and the NCAA, which revealed that student-athletes are also being targeted in similar schemes. Cybercriminals often trick victims into providing verification codes or clicking malicious password reset links, enabling account takeovers.
To mitigate risks, the FBI advises against storing explicit content on accessible platforms, using weak or personal information-based passwords, or engaging with unsolicited messages requesting verification codes. While the bureau did not specify the catalyst for the alert, such advisories typically follow a surge in reported incidents. In 2021, the FBI noted a sharp rise in sextortion complaints, and recent cases underscore the severity of the threat one Canadian man was sentenced to 33 years in prison in May for sextorting over 145 children, some as young as six, over an eight-year period.
Federal Bureau of Investigation (FBI) cybersecurity rating report: https://www.rankiteo.com/company/fbi
NCAA cybersecurity rating report: https://www.rankiteo.com/company/ncaa
"id": "FBINCA1786544643",
"linkid": "fbi, ncaa",
"type": "Cyber Attack",
"date": "9/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'location': 'Global',
'type': ['Individuals',
'Children',
'Adults',
'Student-athletes']}],
'attack_vector': ['Account takeover via verification code theft',
'Malicious password reset links',
'Social engineering'],
'customer_advisories': 'Public warning issued by FBI',
'data_breach': {'data_exfiltration': 'Sold on criminal marketplaces',
'file_types_exposed': ['Images', 'Videos'],
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Sexually explicit images/videos',
'Personally identifiable '
'information (names, birthdates, '
'social media handles)']},
'description': 'The FBI has issued a public alert warning that cybercriminals '
'are increasingly targeting adults and children by hijacking '
'social media and online accounts to steal sexually explicit '
'images or videos. These attackers then use the stolen content '
'for blackmail, threatening to leak it publicly or share it '
'with victims’ contacts unless financial demands are met. In '
'some cases, the material is sold on criminal marketplaces, '
'sometimes alongside victims’ personal details, such as names, '
'birthdates, and social media handles, which can be used to '
'coerce further exploitation. The warning follows a joint '
'alert from the FBI and the NCAA, which revealed that '
'student-athletes are also being targeted in similar schemes.',
'impact': {'data_compromised': ['Sexually explicit images/videos',
'Personal details (names, birthdates, social '
'media handles)'],
'financial_loss': 'Financial demands met by victims',
'identity_theft_risk': 'High',
'systems_affected': ['Social media accounts', 'Online accounts']},
'initial_access_broker': {'data_sold_on_dark_web': 'Yes',
'entry_point': ['Verification code theft',
'Malicious password reset links'],
'high_value_targets': ['Children',
'Student-athletes']},
'investigation_status': 'Ongoing',
'motivation': ['Financial gain', 'Harassment', 'Exploitation'],
'post_incident_analysis': {'root_causes': ['Account takeovers via social '
'engineering',
'Weak password practices']},
'ransomware': {'ransom_demanded': 'Financial demands'},
'recommendations': ['Avoid storing explicit content on accessible platforms',
'Use strong, non-personal information-based passwords',
'Do not engage with unsolicited messages requesting '
'verification codes'],
'references': [{'source': 'FBI Public Alert'}],
'response': {'communication_strategy': 'Public alert issued by FBI',
'law_enforcement_notified': 'FBI'},
'stakeholder_advisories': 'FBI and NCAA joint alert for student-athletes',
'threat_actor': 'Cybercriminals',
'title': 'FBI Warns of Rising Sextortion Schemes Targeting Social Media '
'Accounts',
'type': 'Sextortion',
'vulnerability_exploited': ['Weak passwords',
'Personal information-based passwords',
'Lack of multi-factor authentication']}