Meta AI Support Flaw Allows Instagram Account Hijacking

TL;DR. Meta's AI support feature on Instagram contains a critical vulnerability, enabling attackers to hijack accounts by exploiting a password reset mechanism. - Attackers use a VPN to mimic the account's region, then trick the AI into sending a password reset code to a rogue email. - The flaw has reportedly been exploited to take over more than 100 high-value Instagram accounts in recent days. - A temporary solution involves disabling the AI support feature and reverting hijacked accounts and usernames.

• Meta's AI-driven support on Instagram has a security vulnerability.
• The flaw permits unauthorized password resets and account takeovers.
• Attackers can leverage region spoofing and social engineering against the AI agent.
• Over 100 high-value Instagram accounts have allegedly been compromised.
• Disabling the AI support feature is a suggested immediate remediation.

Back to QLANKR News