Cybercriminals are actively targeting online accounts, including social media, to steal sexually explicit images or videos of adults and children. The stolen content is exploited through blackmail, sale on criminal marketplaces, or shared with other criminals for further coercion (sextortion). Victims may face harassment, stalking, and re-victimization. The FBI and NCAA have warned about these schemes, particularly targeting student-athletes. Indicators include unsolicited texts or emails requesting verification codes or password resets. The FBI advises that legitimate services do not request such codes and recommends strong passwords and multi-factor authentication to mitigate risk.

Victims of these attacks suffer privacy violations, harassment, sextortion, stalking, and potential public exposure of explicit content. The stolen personal information can be used to pressure victims into providing additional private content. These attacks can cause significant emotional distress and reputational harm. Student-athletes and minors are specifically highlighted as vulnerable groups. The FBI notes that sextortionists face severe legal penalties if caught.

The FBI advises that legitimate platforms will not request verification codes, temporary passwords, or PIN reset codes from users. Users should not respond to unsolicited messages asking for such information. It is recommended to avoid storing explicit photos or videos on social media or internet-accessible sites. Use complex, non-personal passwords and enable multi-factor authentication wherever possible. The FBI encourages victims to cease interaction with attackers and contact law enforcement immediately. No official patch or fix applies as this is a threat actor behavior rather than a software vulnerability.