The widespread hacking campaign that relied on simply asking Meta AI’s chatbot to take over a victim’s Instagram account appears to have continued even after the company said the issue had been resolved. Meanwhile, the company has been scrambling to secure the targeted accounts and alert victims. …
… The issue, which Meta says has since been patched, cropped up around the same time Barack Obama’s White House account on Instagram was hacked. On Sunday, users noticed that the @obamawhitehouse account began posting images containing Iranian propaganda. …
Reports have started circulating of a security flaw where hackers are tricking the Meta AI support assistant on Instagram into handing over user accounts without authorization even with 2FA enabled . …
… The attack appeared to rely on tricking Meta’s own AI-powered support chatbot into granting access to a victim’s account. Over the weekend, several users on Reddit claimed that their Instagram accounts had been compromised, and a number of users on X warned of similar account hijackings. …
… Once the chat starts the attacker instructs the chatbot to link a new e-mail address, which the attacker controls, to the target account. With that change in place the hacker can receive a one-time security code and change the password to the account. …
… This tool required access to account information and was almost immediately hacked , as this process was reportedly extremely easy. JUST IN: Instagram account of the Chief Master Sergeant of the U.S. …
… Over the last several days, Telegram groups for security researchers and hacking groups have been sharing videos and screenshots of the steps taken to steal an account, which appeared to be shockingly easy. …
Cyber-crime Russian cybercrims phish their way into officials' Signal and WhatsApp accounts Dutch spies flag large-scale campaign to hijack secure messaging accounts Russian-linked hackers are trying to break into the Signal and WhatsApp accounts of government officials, journalists, and military p… …
… TechCrunch reports that victims included some high-profile Instagram accounts. The compromised accounts include the Instagram handle for the Obama-era White House, which appears to have been inactive since 2017; and the account of the U.S. …
… After changing the email address, the attacker could initiate a password reset process and receive the required security code for gaining access to the account. Some online reports claim that the @e and @f one-letter accounts on Instagram were obtained through an active exploit. …
