FBI warns hackers are breaking into online accounts to steal intimate images

The FBI has issued a public warning that cybercriminals are breaking into the social media accounts of both adults and children in order to steal intimate, explicit images and videos. According to the alert, attackers primarily rely on social engineering tactics to gain access to victims' accounts.

Once hackers obtain the material, victims frequently face further harm, including harassment, sextortion, stalking, or other targeted attacks — in some cases, stolen content is even posted directly on the victim's own social media page.

Rachel Tobac, CEO of security awareness training firm SocialProof Security, said these types of crimes have been known for years, but the FBI's public alert may signal that such incidents are increasing. The FBI noted that student-athletes are frequently targeted because of their public profiles. Tobac added that young boys are especially targeted, calling it a significant public health issue, since some victims are driven to self-harm as a result.

How the attacks work

According to the FBI's advisory, attackers use several methods: brute-forcing accounts with leaked or previously used passwords, impersonating customer service representatives from companies like Instagram, and contacting targets under the pretense of helping them recover their account. Some hackers also use phishing emails built around fake domains designed to resemble legitimate social media login pages.

The FBI recommends using unique passwords stored in a password manager, enabling multi-factor authentication, and remaining suspicious of anyone who reaches out unprompted claiming to represent a social media company, since tech companies generally do not contact customers this way. The bureau also urges people to avoid storing intimate images in their online accounts altogether.