A widespread hacking campaign exploited Meta's AI support chatbot to hijack Instagram accounts by simply asking the bot to link target accounts to attacker-controlled emails. The chatbot complied without any human verification, enabling password resets and full account takeovers. Despite Meta claiming the issue was fixed on Monday, attacks continued into Tuesday, with hackers advertising stolen 'OG' handles for sale on Telegram. Meta has since secured affected accounts, sent password reset emails, and begun notifying victims of suspicious activity, though the company declined to disclose how many users were affected.
1 Impression