Hackers Used Meta's AI Support Bot to Seize Instagram Accounts
krebsonsecurity.com
June 1, 2026
3 min read
🔥🔥🔥🔥🔥
44/100
Summary
Hackers exploited Meta’s AI support bot to reset passwords and seize Instagram accounts, including those of the Obama White House and the Chief Master Sergeant of the U.S. Space Force. Instructions on how to manipulate the bot circulated on Telegram, allowing users to add email addresses to existing accounts.
Key Takeaways
- Hackers exploited Meta’s AI support bot to reset passwords and seize high-profile Instagram accounts, including those of the Obama White House and the U.S. Space Force.
- The exploit involved using a VPN to simulate the target's location and instructing the AI bot to link the account to a new email address for password reset.
- Meta has implemented an emergency patch to address the vulnerability, but the incident highlights the security risks associated with AI chatbots handling sensitive account recovery tasks.
- Multi-factor authentication (MFA) significantly mitigates the risk of such exploits, as accounts with MFA enabled were not compromised in this attack.
Community Sentiment
Concerns
- The use of Meta's AI support bot to exploit account access highlights extreme negligence in security measures, raising concerns about the effectiveness of AI in safeguarding user data.
- This incident underscores a troubling trend where companies prioritize ad sales over robust security, suggesting a lack of accountability in AI-driven systems.
