Forest Global Training Partners

Cyber Risks · Krebs on Security

Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts

Summary: Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages after instructions spread on Telegram showing how to trick Meta's AI support assistant into resetting account passwords. The exploit, documented in a Telegram video, involved a VPN connection near the target's hometown, a password reset request, and instructing the bot to link a new email address, which then received a one-time code; Meta's Andy Stone said the issue was resolved, and thecybersecguru.com reported an emergency patch with no back end database breached.

Bottom line: The hackers said their exploit failed against any account with MFA enabled, and they claimed the hijacked short account names carried a resale value of more than a half million dollars.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related