Demi Lavoto has joined the list of celebrities whose private photos were stolen and leaked online in the second Celebgate incident, but private citizens should also beware of similar and sometimes worse exploits.
A spearphishing scammer demanded a sex show from a private citizen after obtaining the victim's email credentials by using an old friend's Facebook account they had previously managed to compromise, according to the BBC.
The scammer used the victim's friend's compromised Facebook account to convince the victim to hand over their credentials after prompting the victim to vote for them in an online competition they claimed had the potential to alter the friend's career.
As soon the credentials were sent, the scammer immediately began shutting the victim out of several online accounts and even enabled two-factor authentication on their iCloud account which contained a photo of their passport, bank details, and some explicit pictures. This made it very difficult for the victim to regain control of her accounts.
The scammer told the victim that they had used a similar scam on nearly a dozen other victims on prior occasions.
The victim was then ordered to perform explicit acts on camera for them or the scammer would post the images to Facebook. The victim refused and was able to close their Facebook account before the images were posted but the scammer still was able to send photos to the victim's contacts.
Law enforcement has taken a stance to cut down on online crimes and managed to arrest and convict a series of hackers in relation to the original Celebgate.
