A recent Instagram exploit allows attackers to hack accounts by faking their location using a VPN or proxy. This method requires only the target account's username to initiate the takeover process.