Major Alert for Instagram Users! Hackers Are Misusing Meta AI
Instagram Hacked by Meta AI: Using Meta's AI assistant, hackers have successfully compromised several major Instagram accounts. The company has now stated that it is working to fix this issue.
Instagram Hacked by Meta AI: Meta has integrated its Meta AI assistant across all its platforms, including Instagram, WhatsApp, and Facebook. Now, hackers are exploiting this tool to target Meta's very own platforms. In a recent incident, it was revealed that hackers utilized Meta's AI tool to compromise several high-profile Instagram accounts. These accounts include the official White House handle created during Barack Obama's presidency, as well as the account of a senior officer in the U.S. Space Force. Following the revelation of this information, Meta has resolved the issue.
How Did the Issue Come to Light?
According to reports, hackers used Meta's AI tool to send password reset codes to email addresses under their own control. This allowed them to gain access to accounts without having to breach the users' devices. Security researchers known as "Dark Web Informer" and "ZachXBT" were the first to expose this vulnerability. Subsequently, numerous users across Telegram, X (formerly Twitter), and Reddit reported similar instances of account takeovers.
How Did Hackers Trick Meta AI?
Rather than relying on malware or phishing scams, the hackers managed to trick Meta's own AI assistant to carry out this exploit. To achieve this, the hackers first used a VPN to spoof their location, making it appear as though they were logging in from the exact geographical area associated with the target account. Next, they navigated to the Instagram login page and selected the "Forgot Password" option. From there, they were redirected to the Meta AI support feature, where a conversational interaction with Meta AI began. While interacting with the AI chatbot, hackers utilized specially crafted prompts to request that Meta AI add a new email address to a victim's account. As soon as the request was accepted, a verification code was sent to that address. Since the new email address was under the hackers' control, they were able to use this code to take over the account.
Instagram Confirms Issue Has Been Fixed
Instagram has resolved this issue. A Meta spokesperson stated on Monday that the security vulnerability has been patched and that the affected accounts are currently being secured. The company has not disclosed how many accounts were targeted using this method.
