Listen to the episode
TLDR
The FBI is warning that criminals are hijacking social media and personal accounts to steal intimate images, then posting or selling them alongside victims' contact details on criminal marketplaces. Tactics combine credential stuffing from...
How it works
The FBI is warning that criminals are hijacking social media and personal accounts to steal intimate images, then posting or selling them alongside victims' contact details on criminal marketplaces. Tactics combine credential stuffing from...
Red flags
- Unsolicited texts claiming your account will be locked and urging you to share a verification code Phishing emails from lookalike support domains warning of a 'new login' and prompting a password change High volume login attempts or account lockouts after reusing the same password on multiple sites
What to do
- 1Enable multi factor authentication using passkeys or hardware security keys, and never share verification codes Store intimate images offline and use a password manager to assign a unique long password to every account Report stolen content through the FBI NCII portal at ncii.ic3.gov and preserve evidence before securing affected accounts
Source
malwarebytes
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/news/2026/08/sexual-predators-targeting-online-accounts-for-intimate-images-fbi-warnsFAQ
Is Account Takeover Scams Targeting Intimate Images: FBI Warning on NCII Theft a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Unsolicited texts claiming your account will be locked and urging you to share a verification code Phishing emails from lookalike support domains warning of a 'new login' and prompting a password change High volume login attempts or account lockouts after reusing the same password on multiple sites
What should I do first?
Enable multi factor authentication using passkeys or hardware security keys, and never share verification codes Store intimate images offline and use a password manager to assign a unique long password to every account Report stolen content through the FBI NCII portal at ncii.ic3.gov and preserve evidence before securing affected accounts
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.