An Illinois man was sentenced on Tuesday to 76 months in prison and three years of supervised release for hacking the Snapchat accounts of over 750 women to steal nude photos, which he later traded or sold online.
Phishing and Social Engineering Tactics
After being charged in December, 26-year-old defendant Kyle Svara admitted in February to having used various social engineering tactics to phish Snapchat access codes from over 750 women. Between May 2020 and February 2021, he targeted more than 4,500 victims while posing as a representative of Snap Inc and using anonymized phone numbers.
After stealing the victims' credentials, Svara accessed approximately 517 women's Snapchat accounts without permission to download nude or semi-nude photos and activated two-factor authentication to lock them out of the compromised accounts.
Distribution of Child Sexual Abuse Material
The investigators also found that Svara distributed child sexual abuse material (CSAM), finding approximately 530 images and 600 videos depicting CSAM in his Mega account.
According to the Justice Department, when Svara was interviewed by investigators, he falsely stated that he did not know anything about hacking Snapchat. Additionally, he falsely stated that he had no interest in child pornography and had never actively sought out or accessed child sexual abuse material (CSAM). Contrary to these statements, the defendant collected, distributed, and solicited CSAM.
Advertising and Trading Stolen Images
According to court documents, Svara also advertised his services online, trading the stolen images, offering to get into girls' snap accounts, and asking potential clients to reach out through the Kik encrypted messaging app.
Steve Waithe, a former Northeastern University track and field coach and one of his clients, hired Svara to hack the Snapchat accounts of students at Northeastern and members of the women's track and field and soccer teams. After being found guilty of targeting at least 128 women and stealing thousands of explicit photos from more than 100 women, Waithe was sentenced in March 2024 to five years in prison for cyber fraud, cyberstalking, and sextortion.
Independent Hacking Activities
Between paid hacking jobs, Svara also independently hacked into the accounts of many women in Plainfield, Illinois, including neighbors, family friends, classmates, his own personal friends, as well as students at Colby College in Waterville, Maine.
The case highlights the importance of cybersecurity and the need for individuals to protect their online accounts from phishing and social engineering tactics. It also emphasizes the severity of the consequences for those who engage in such activities, including hacking and distributing child sexual abuse material.
Security teams should be aware of the potential threats and take necessary measures to protect their systems and data from cyber attacks. This includes implementing robust security measures, such as two-factor authentication, and educating users about the risks of phishing and social engineering tactics.
In addition, individuals should be cautious when sharing personal information online and should be aware of the potential risks of social engineering tactics. They should also report any suspicious activity to the authorities and take steps to protect their online accounts.
By taking these measures, individuals and organizations can help prevent cyber attacks and protect themselves from the consequences of hacking and other cyber crimes.
The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection. Get the whitepaper to learn more about how to protect your organization from cyber threats.
- Related Articles:
- Hugging Face warns an autonomous AI agent hacked its network
- FBI warns of in-person data theft attacks from extortion gang
- New Helix phishing group emerges in SharePoint data theft attacks
- Entra passkey enrollment phishing targets Microsoft 365 users
- Webinar tomorrow: Why modern email attacks require a new approach to defense
Source: BleepingComputer