Cybersecurity researchers have detailed a new scam that targets corporate Instagram accounts and influencers with a substantial number of followers. Instagram is one of the largest social media networks in the world, and was the second-most downloaded app of 2021, just behind TikTok. It is no wonder then that the app has been a constant target for scammers and cybercriminals.
One of the best ways to prevent becoming a victim of online cybercrime is to be cautious before clicking on links from unknown messengers. It is also worth noting that two-factor authentication (2FA) could potentially save users from getting their accounts hijacked. Like most other leading social media platforms, Instagram offers 2FA, so it is advisable that users enable that feature to avoid falling victim to scams.
Related: What Are Silent Instagram DMs & Why Should We Send Them?
Researchers with cybersecurity firm SecureWorks have discovered a phishing campaign whereby criminals are hijacking people's Instagram accounts and then demanding ransom payments from them to release those accounts. The phishing messages are designed to seem like they're legitimate warnings from Instagram about a potential copyright infringement. The message asks users to click on a link for more details about the alleged copyright violation. Victims clicking on that link will see a message threatening to close the account unless they appeal the copyright allegation. To challenge the copyright strike, they'll have to fill in their password, which is exactly what the crooks need to gain control over the victim's account.
After taking over the account, the criminals allegedly change the password and username. They then post a stern warning on the profile, saying «this
Read more on screenrant.com