The FBI has issued a new warning over a form of cybercrime that combines account compromise, social engineering and digital extortion, with criminals targeting both adults and minors to obtain intimate photographs and videos.

The bureau said attackers are gaining unauthorized access to victims’ social media accounts and then using stolen material for extortion, harassment, stalking and other targeted abuse. In some cases, criminals may also publish or promote the stolen content through the victim’s own social media presence, extending the impact of the initial intrusion.

Although the underlying techniques are not new, the FBI’s decision to issue a public alert highlights the growing importance of protecting personal accounts as a first line of defense against highly personal forms of cybercrime. Security experts cited in the reporting believe the incidents may be increasing, with young people among the groups receiving particular attention from attackers.

One of the most significant aspects of the threat is that attackers do not necessarily need sophisticated malware or previously unknown software vulnerabilities. Instead, they can exploit weaknesses in human behavior and account security.

The FBI identified several methods used by criminals. These include attempting to access accounts using leaked or previously reused passwords, impersonating customer-support representatives from social media platforms, and contacting targets under the pretext of helping them recover or secure an account. Attackers may also send phishing messages containing fake login pages designed to resemble legitimate social media websites.

This makes the threat particularly difficult to address because the attack surface extends beyond the technology itself. Even a platform with strong security infrastructure can be undermined when users reuse passwords, trust unsolicited support requests or enter credentials into convincing fraudulent websites.

The commercial and institutional implications are also significant. Social media platforms increasingly function as repositories for personal memories, conversations, identity information and private media. A compromised account can therefore expose much more than a password. It can become an entry point into a person's digital identity and, in cases involving intimate material, create consequences that extend far beyond conventional financial cybercrime.

The FBI specifically said student-athletes are frequently targeted because their public profiles can make them easier for criminals to identify and approach. This demonstrates how publicly available information can be used as part of the targeting process, particularly when individuals have large audiences or recognizable online identities.

For victims, the consequences can continue long after the original account has been recovered. The bureau warned of potential harassment, sextortion, stalking and other forms of targeted abuse. The possibility that stolen material can be redistributed or used to pressure victims makes these attacks fundamentally different from many conventional account compromises.

The situation also raises concerns about younger users. When minors become targets, the consequences can be particularly severe because they may have limited understanding of social engineering techniques and may be less prepared to respond to threats involving private content.

From a cybersecurity perspective, the FBI’s recommendations emphasize basic account hygiene rather than complex technical defenses. Users are encouraged to maintain unique passwords, preferably stored through a password manager, and to activate multifactor authentication. The bureau also advises people to be cautious when someone unexpectedly claims to represent a social media company, particularly when the interaction involves account recovery or requests for login information.

The warning also carries an important lesson for technology companies. Security cannot be treated solely as a technical feature added to a platform. User education, fraud detection, identity verification and effective responses to compromised accounts are increasingly part of the overall trust infrastructure of digital services.

Platforms also face the challenge of preventing criminals from exploiting their own branding and customer-support systems. Fake representatives and imitation login pages work because attackers can reproduce the visual identity and communication style users associate with legitimate services. Stronger authentication and clearer communication policies can therefore help reduce the effectiveness of these attacks.

For businesses, the issue demonstrates why account security has become a broader brand and trust concern. A platform associated with repeated account compromises or ineffective responses to digital extortion can face reputational damage even when the initial attack resulted from user-level deception.

The FBI is also advising people to avoid storing intimate images in online accounts, an unusually direct recommendation that reflects the severity of the consequences when such accounts are compromised.

Ultimately, the latest warning illustrates how cybercrime is increasingly exploiting the intersection between technology and personal vulnerability. The objective is not necessarily to steal money or corporate data; in these cases, criminals are seeking information that can be used to exert psychological and social pressure on individuals.

The broader security lesson is clear: protecting an online account requires more than a strong password. Multifactor authentication, unique credentials, skepticism toward unsolicited support messages and careful management of private content can substantially reduce the opportunities available to attackers.

As social media becomes an increasingly important part of personal identity, the protection of these accounts is becoming a matter of personal safety as well as cybersecurity.