Snapchat Phishing Scheme Exposes Vulnerabilities in Account Security
An Illinois man, Kyle Svara, has pleaded guilty to a phishing scam targeting nearly 600 Snapchat accounts, aiming to steal nude and semi-nude images from female student athletes. The case underscores the growing threat of social engineering attacks and the importance of robust online security practices.
How the Scam Worked
Svara obtained victim emails, phone numbers, and Snapchat usernames through “social engineering” and other methods. He then used a TextNow account to pose as the ‘Snapchat Support Team,’ sending over 4,500 messages designed to trick users into revealing their login codes. At least 59 women had their accounts compromised as a result.
The scam didn’t stop at basic account access. Svara also sought four-digit ‘My Eyes Only’ passcodes, granting him access to a more secure section of the victims’ Snapchat accounts.
The Role of Steve Waithe
Investigators discovered that Steve Waithe, a former track and field coach, allegedly hired Svara to steal the images, paying him $50 for his services. Waithe was previously sentenced to five years in prison for a similar scheme involving over 100 women and numerous fake social media accounts.
The Rising Tide of Phishing and Social Engineering
This case is not isolated. Phishing attacks, particularly those targeting social media platforms, are becoming increasingly sophisticated. Attackers exploit human psychology to gain trust and manipulate individuals into divulging sensitive information.
Svara advertised his ability to infiltrate Snapchat accounts on online forums, including Reddit, and even sold or traded the stolen images. This highlights the dark underbelly of online marketplaces and the demand for illegally obtained personal data.
Protecting Yourself from Phishing Attacks
Snapchat recommends users regularly check their privacy settings, controlling who can send Snaps, view their Story, and notice their location. Using a strong, unique password is also crucial. Snapchat explicitly states they will never ask for your password.
Here are some additional steps to protect yourself:
- Be wary of unsolicited messages: Especially those requesting personal information or login codes.
- Verify sender authenticity: Don’t trust display names alone. Check the sender’s email address or phone number carefully.
- Enable two-factor authentication: This adds an extra layer of security to your accounts.
- Keep your software updated: Security updates often patch vulnerabilities that attackers can exploit.
The Future of Account Security
As technology evolves, so too will the tactics of cybercriminals. The increasing reliance on AI and machine learning could lead to even more convincing and personalized phishing attacks. Developing more robust security measures, including advanced authentication methods and AI-powered threat detection systems, will be essential to staying ahead of the curve.
The need for user education is also paramount. Raising awareness about the risks of phishing and social engineering is crucial to empowering individuals to protect themselves online.
Get Our Best Stories!
Stay Safe With the Latest Security News and Updates
Thanks for signing up!
Your subscription has been confirmed. Keep an eye on your inbox!
About Our Expert
Michael Kan
Senior Reporter
Experience
I’ve been a journalist for over 15 years. I got my start as a schools and cities reporter in Kansas City and joined PCMag in 2017, where I cover satellite internet services, cybersecurity, PC hardware, and more. I’m currently based in San Francisco, but previously spent over five years in China, covering the country’s technology sector.
Since 2020, I’ve covered the launch and explosive growth of SpaceX’s Starlink satellite internet service, writing 600+ stories on availability and feature launches, but also the regulatory battles over the expansion of satellite constellations, fights with rival providers like AST SpaceMobile and Amazon, and the effort to expand into satellite-based mobile service. I’ve combed through FCC filings for the latest news and driven to remote corners of California to test Starlink’s cellular service.
I also cover cyber threats, from ransomware gangs to the emergence of AI-based malware. Earlier this year, the FTC forced Avast to pay consumers $16.5 million for secretly harvesting and selling their personal information to third-party clients, as revealed in my joint investigation with Motherboard.
I also cover the PC graphics card market. Pandemic-era shortages led me to camp out in front of a Best Buy to get an RTX 3000. I’m now following how President Trump’s tariffs will affect the industry. I’m always eager to learn more, so please jump in the comments with feedback and send me tips.
Related reading