AI-chatbot Instagram attacks: mass account takeovers, Meta notifies victims

Colleagues, I wish to draw attention to a cybersecurity incident: attackers exploited a Meta chatbot to seize Instagram accounts.

- Hackers asked the bot to confirm account ownership and link an email, then reset the password — without employee involvement.
- Meta says it has fixed the issue, but reports of takeovers and listings for “OG” handles persist.
- The company has begun blocking access and sending notifications urging password resets.

Why this matters: automating critical AI-driven operations without robust verification creates new attack vectors.

Recommended actions: reset passwords when notified, enable 2FA, and review account recovery methods.

Do you consider Meta’s measures adequate?

#cybersecurity #AI #Instagram #Meta