Earlier this week, Emilio Herrera agreed to plead guilty to hacking the personal information including nude photos of more than fifty celebrities in 2013 and 2014. Although the names of the specific celebrities whose nude photos were stolen were not contained in the federal complaint, it is believed that among the hacked celebrities was Jennifer Lawrence whose nude photos were stolen and shared on the Internet.
Herrera is the third person to have been independently charged for such hacking. Edward Majerczyk and Ryan Collins were both charged, convicted and sentenced to federal prison for similar hacking of celebrities personal photos.
While at the initial time that the celebrity photos were stolen from their iCloud and Gmail accounts there were questions about the security of the Cloud and Gmail, eventually it became known that all three hackers used spear phishing emails to their victims posing as as the victims’Internet Service Providers, Apple, Yahoo and Hotmail to trick their victims into providing their user names and passwords to the hackers enabling them to readily access the photos in the Cloud or in their Gmail accounts.
There are a number of lessons to be learned from this crime about how to protect our own security. It is important to resist providing your username and passwords in response to emails and text messages unless you have absolutely and independently confirmed that the request is legitimate, which such requests seldom are. If you have any concern that such a request might be legitimate, merely call the real company to confirm the legitimacy of the communication.
Also, take advantage of the dual-factor identification protocols offered by Apple and many others. With dual-factor identification, your password is only the starting point for accessing your account. After you have inputted your password, the site you are attempting to access will send a special one-time code to your smartphone for you to use to be able to access your account. In some instances, the companies will only send the code to you if your account is being accessed from a different device than you usually use to access your accounts. Had Jennifer Lawrence and the other hacked celebrities used dual-factor identification, they would still have their privacy.
It is also important to note that merely because you think you have deleted a photograph or video from your smartphone, that may not be accurate. Smartphones save deleted photographs and videos on their cloud servers such as the Google+service for Android phones and the iCloud for iPhones. However, you can change the settings on your smartphone to prevent your photos from automatically being preserved in the cloud.