Hackers hijacked Instagram accounts by tricking Meta's AI support bot
Attackers got Meta's AI support assistant to add their email to victims' accounts and reset passwords. Meta says it's fixed.
How it worked
- The hacker asked Meta AI Support Assistant to add a new email to the target's account.
- The bot sent a verification code to the hacker's email.
- The hacker passed the code back, and the bot showed a Reset Password button.
- A VPN spoofed the victim's location to avoid automated protections.
Who was hit
- The Obama-era White House Instagram account.
- A Space Force chief master sergeant's account.
Meta's response
Spokesperson Andy Stone said the issue was fixed. It's unclear how many users were affected.
Tip
Turn on two-factor authentication.
Founder and editor-in-chief of Kurd Developers. Phone and tech news on YouTube, Instagram and TikTok.
More stories
One text can break your phone: Android's 'SMS of Death' explained
A flaw in Android 12 and later lets a specially crafted SMS drop calls and even make a phone unusable. The fix is in October's security patch.
GTA VI lands November 19: prices, editions and what to know
Rockstar has locked the date: Thursday, November 19 on PS5 and Xbox Series X|S. Standard costs $79.99 and Ultimate $99.99.
Apple's first touchscreen MacBook Pro brings OLED and Dynamic Island
The new PROLED XDR display responds to touch, the notch is gone and Dynamic Island takes its place. Prices start at $2,899.
The $1,999 iPhone Duo Has a Black-Bar Problem, and Fixing It Is Harder Than It Looks
Apple's first foldable is a hardware flex. But unfold it and many of your apps shrink into a phone-shaped window floating in black. Here's why the app world wasn't ready, and why developers can't just hit "stretch".