Monthly Cyber Threat Highlights – December 2025

woman with a cup of coffee in her hand thinking ab 2026 01 11 08 30 58 utc

Be a Cyber Hero | Youth & Young Adult Edition

Adapted for teens and young adults in the United States


Why December is a high-risk month online

December is not just about holidays and free time. For cybercriminals, it’s one of the most effective months of the year.

More time online, more social activity, more digital gifts, and stronger emotions all increase exposure.

In December 2025, the main threats affecting teens and young adults in the U.S. were:

  • digital extortion and fake emergencies,
  • sextortion and emotional manipulation,
  • scams using AI (fake images, fake voices),
  • social media and gaming-based fraud.

These attacks don’t start with “hacking.” They start with behavior.


Threat 1: Fake kidnapping and digital extortion using AI

Criminals are using public photos and videos from social media to create fake kidnapping scenarios. Some messages include altered images or AI-generated content to make the threat feel real.

The goal is simple: create panic, apply pressure, and force fast payment.


Real scenario: fear as a weapon

A parent or guardian receives a message saying:

“Your child has been taken. Pay now.”

A photo is attached.

The image looks real — but it’s not.

The attacker uses urgency and fear to stop people from checking the facts.


How teens can reduce this risk
  • Avoid sharing real-time location publicly
  • Limit who can see your posts and stories
  • Be careful with photos that show routines or places

Families that create a private verification code (like a family safety word) are much harder to scam.


Threat 2: Messages that move you to private apps

Many scams start with a text, DM, or voice message and quickly push the conversation to another app.

This is not accidental.

Attackers want isolation, speed, and secrecy.


Real scenario: “Send me the code real quick”

A message looks like it’s from a friend, partner, or teammate.

They ask for:

  • a login code,
  • a verification number,
  • or quick help with an account.

That code can give attackers full access to your account.


Cyber Hero rule

No one ever needs your verification code (like 2-step verification or MFA codes).

Not a friend.

Not tech support.

Not a company.

If someone asks for it, that’s the red flag.


Threat 3: Sextortion targeting teens

Sextortion remains one of the most harmful and emotionally damaging threats affecting teens.

It usually starts with trust.

Then turns into pressure and fear.


Real scenario: fake connection

Someone pretends to be another teen.

After gaining trust, they request an image.

Once it’s sent, the threat appears:

“Pay or I share this.”

Sometimes the image is real.

Sometimes it’s edited or completely fake.

The pressure feels real either way.


If this happens
  • Stop responding
  • Do not delete messages or evidence
  • Ask a trusted adult for help
  • Report the account on the platform

Reporting is a Cyber Hero action.

When you report abuse, sextortion, or fake profiles on platforms like Instagram, TikTok, or Discord, you’re not just protecting yourself — you’re helping protect other teens from the same attacker.

You can also use Take It Down, a tool from the National Center for Missing & Exploited Children (NCMEC), to help remove intimate images shared online.

Getting help is not failure.

It’s protection.


Threat 4: Gaming and community scams

Gaming platforms and community servers are frequent targets for scams.

Common traps include:

  • free items or skins,
  • fake tournament invites,
  • mod or plugin downloads,
  • hijacked community links.

One click can mean losing your account — sometimes more than one.


Real scenario: “free upgrade”

A link promises something extra.

You join a server.

You download a file.

Your account is gone.


Threat 5: Social media as a scam entry point

Social media is often where scams begin.

Fake stores, fake giveaways, fake opportunities.

If it feels rushed, emotional, or too good to be true — that’s the signal.


Be a Cyber Hero: December safety checklist

  • Keep profiles limited
  • Use multi-factor authentication
  • Never share verification codes (like MFA or 2-step codes)
  • Question urgency and pressure
  • Report suspicious behavior
  • Ask for help when something feels wrong

How this makes you a Cyber Hero

A Cyber Hero:

  • understands that online behavior has real consequences,
  • recognizes emotional manipulation,
  • reports threats to protect others,
  • protects privacy and identity,
  • uses technology with awareness.

Cybersecurity starts with behavior.


Daniel Porta

Cybersecurity Professional | CISO

Founder, Be a Cyber Hero Initiative

Leave a Comment

Your email address will not be published. Required fields are marked *