Instagram Hacked: AI Support Chatbot Tricked into Granting Account Access
Several high-profile Instagram accounts were compromised through a clever trick that exploited the platform's own AI support chatbot. Here’s how it worked and what you can do to stay safe.
Admin User
Instagram Hacked: Clever Trick Exploits AI Support Chatbot
Recently, several users reported their Instagram accounts being hacked, highlighting a concerning security flaw that exploited the platform's own AI support system. The hack targeted victims by tricking Meta’s AI-powered support chatbot into granting unauthorized access to an account.
A Closer Look at the Hack
The process involved using a Virtual Private Network (VPN) to spoof the victim's location and bypass Instagram's automated security measures. Then, hackers would initiate contact with Meta’s AI Support Assistant, requesting it to add a new email address to the target account. Once the chatbot sent a verification code to this fake email, the hacker shared it back to gain control of the account.
High-Profile Victims
The hack affected several significant accounts, including one associated with the Obama-era White House and the U.S. Space Force’s chief master sergeant John Bentivegna. Additionally, security researcher Jane Wong also reported that her Instagram account was compromised.
Instagram Responds to Security Issue
In response to these incidents, Instagram has since addressed the issue. On Monday, an Instagram spokesperson stated that the problem had been fixed. However, it remains unclear how many users were affected by this security breach.
What You Can Do to Stay Safe
- Be Wary of Unusual Requests: Be cautious if you receive any unusual requests from support chatbots or other customer service interactions.
- Use Strong, Unique Passwords: Ensure your accounts are secured with strong passwords that aren't reused across multiple platforms.
- Enable Two-Factor Authentication (2FA): This adds an extra layer of security by requiring a second form of verification before accessing your account.
- Regularly Update Your Security Settings: Stay informed about any new security features or updates from Instagram and other social media platforms.
If you have more information on these hacks or other similar issues, TechCrunch welcomes your input. Contact us securely via Signal at +1 917 257 1382, Telegram & Keybase @lorenzofb, or email.
