{"id":730872,"date":"2026-06-01T22:07:11","date_gmt":"2026-06-01T19:07:11","guid":{"rendered":"https:\/\/buradabiliyorum.com\/en\/hackers-hijacked-instagram-accounts-by-tricking-meta-ai-support-chatbot-into-granting-access\/"},"modified":"2026-06-01T22:07:11","modified_gmt":"2026-06-01T19:07:11","slug":"hackers-hijacked-instagram-accounts-by-tricking-meta-ai-support-chatbot-into-granting-access","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/hackers-hijacked-instagram-accounts-by-tricking-meta-ai-support-chatbot-into-granting-access\/","title":{"rendered":"Hackers hijacked Instagram accounts by tricking Meta AI support chatbot into granting access"},"content":{"rendered":"
\n

Instagram has resolved a security issue that allowed several users\u2019 accounts to get hacked. The attack app<\/a>eared to rely on tricking Meta\u2019s own AI-powered support chatbot into granting access to a victim\u2019s account.<\/p>\n

Over the weekend, several<\/a> users<\/a> on Reddit<\/a> claimed that their Instagram accounts had been compromised, and a number<\/a> of<\/a> users<\/a> on X warned of similar account hijackings. The compromised accounts include the Instagram\u00a0handle for the Obama-era White House<\/a>, which appears to have been inactive since 2017; and the account of the U.S. Space Force\u2019s chief master sergeant John Bentinvegna<\/a>.<\/p>\n

Security researcher Jane Wong said her Instagram account was also taken over.\u00a0<\/p>\n

\u201cThe password got changed without my knowledge and I was getting different password reset attempts throughout yesterday,\u201d said<\/a> Wong. \u201cQuite concerning.\u201d\u00a0<\/p>\n

A video<\/a> posted on X showed the step-by-step process to hack someone\u2019s Instagram account. The hacker allegedly used a VPN to spoof the targets\u2019 presumed location to avoid triggering Instagram\u2019s automated account protections. Then, the hacker opened a chat with Meta AI Support Assistant and asked the bot to add a new email address to the target\u2019s account. The chatbot can be seen sending a verification code to the email address provided by the hacker; the hacker then shares the verification code with the chatbot, which prompts the chatbot to show a button to \u201cReset Password.\u201d The hacker enters a new password and takes over the victim\u2019s account.\u00a0<\/p>\n

TechCrunch was able to verify that the hacker\u2019s public email mailbox, which was displayed in the video, effectively received the verification code.\u00a0<\/p>\n

The attack relied on the fact that at no point the hacker had to take over the legitimate email address linked to the victims\u2019 Instagram account.\u00a0<\/p>\n

On Monday, Instagram spokesperson Andy Stone said in a reply<\/a> to Wong\u2019s post and others that the issue was now fixed. It\u2019s unclear how many Instagram users had their accounts improperly accessed.<\/p>\n

Meta did not immediately respond to TechCrunch\u2019s request for comment.<\/p>\n<\/div>\n

When you purchase through links in our articles, we may earn a small commission. This doesn\u2019t affect our editorial independence.<\/em><\/p>\n

If you liked the article, do not forget to share it with your friends. Follow us on\u00a0Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n

\n

If you want to read more like this article, you can visit our Technology<\/a><\/span> category.<\/strong><\/p>\n<\/blockquote>\n

Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Instagram has resolved a security issue that allowed several users\u2019 accounts to get hacked. The attack appeared to rely on tricking Meta\u2019s own AI-powered support chatbot into granting access to a victim\u2019s account. Over the weekend, several users on Reddit claimed that their Instagram accounts had been compromised, and a number of users on X…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","footnotes":""},"categories":[18],"tags":[],"class_list":["post-730872","post","type-post","status-publish","format-standard","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/730872","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=730872"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/730872\/revisions"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=730872"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=730872"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=730872"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}