Security News > 2021 > February > This scumbag stole and traded victims' nude pics and vids after guessing their passwords, security answers

A college graduate has admitted hacking into the email and online accounts of female students, stealing their nude photos and videos, and trading them with others.

The compromised MyPlattsburgh accounts contained full access to the student's SUNY-PB email, a cloud storage account, college billing and financial aid information, coursework, grades, and other personal information.

The two broke in either by guessing passwords or answering a security question correctly, then used the portal's information to try again for external email, cloud, and social media accounts.

After finding intimate photos and videos, they downloaded and traded the files with others, with Faber also identifying the students by name, some of whom he admitted to prosecutors that he knew personally.

Investigators tracked Faber and Fish down and uncovered group chats in which the duo discussed breaking into accounts and resetting passwords.

The university said it spent $35,000 checking computer logs, resetting passwords, and notifying students that their accounts had been compromised.

News URL

https://go.theregister.com/feed/www.theregister.com/2021/02/11/hacker_suny_pictures/