The FBI warns that criminals are breaking into social media and personal accounts to steal explicit images and sell or share them online, often with the victim’s personal details attached. The warning highlights specific tactics such as password guessing from breached data, fake “account will be locked” texts that trick victims into sharing verification codes, and phishing emails posing as platform support.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
The FBI says criminals are hijacking Snapchat and other accounts just to steal private photos and sell them with your name and phone number attached. Here’s the trick: you get a text saying, 'Your Snapchat account will be locked unless you supply a verification code.' At the same time, Snapchat sends you a real password‑reset code. If you reply with that code, they reset your password and walk right into your account. Same play with email: 'Security alert: new login detected. Change your password using the link below.' The sender is a look‑alike domain, and the link opens a fake login page asking for your username and password. Your move: if any text or email asks for a verification code or wants you to click a password link, stop. Don’t reply, don’t click, go straight to the app or website yourself and check from there.
The FBI says criminals are using social engineering to take over social media accounts, steal explicit content, and sell or post it online along with victims’ personal information. Reported tactics include pretending to be a social media company representative, spamming victims with password-reset…
The FBI warns that criminals are breaking into social media and personal accounts to steal explicit images and sell them online, often bundled with personal details. The advisory describes common social-engineering lures, like fake customer-service texts and phishing emails, that trick people into…
The FBI warned that criminals are breaking into personal and social media accounts to steal and share intimate images and videos without consent. The campaign uses social engineering like fake customer-service texts and phishing “new login” emails to trick victims into handing over verification…
The article describes real-world ways attackers get around multifactor authentication (MFA), including “push bombing” (MFA fatigue), phishing pages that relay codes in real time, SIM swapping, and stealing session cookies so MFA isn’t needed again. It also cites known incidents (e.g., Uber 2022 MFA…
The FBI warned that scammers are impersonating IC3 leadership using AI-generated (deepfake) videos and spoofed IC3 websites to trick prior fraud victims into sharing more personal and financial information. In one example, victims are contacted on Facebook Messenger by someone posing as an FBI…
Researchers tied North Korea’s Lazarus Group to a real-world campaign that approaches professionals with convincing fake recruiter outreach and job offers. Victims are tricked into opening a malicious PDF or installing a fake PDF viewer from lookalike websites, which then installs backdoors and can…
