Meta AI Support Exploit: Instagram Accounts at Risk

Imagine losing control of your Instagram account without ever sharing your password. This unsettling reality faces users hit by a new flaw in Meta's AI support feature.

The core issue is an exploitation method that gives unauthorized access to Instagram accounts. Attackers trick the AI assistant into sending a password reset link to any email. Over 100 high-value accounts have been hijacked, according to Hacker News.

Key Takeaways

• Meta's AI feature enables unauthorized access via simple steps.
• Over 100 high-value accounts compromised.
• VPNs bypass regional security checks.
• User vigilance and stronger 2FA are critical defenses.

The Exploit: How Does It Work?

The exploit targets a weakness in how the AI assistant handles password reset requests. Attackers send a crafted prompt, bypassing standard verification processes:

1. Impersonation: They use a VPN to appear in the target account's region.
2. Manipulation: Instruct the AI to send a password reset link to an arbitrary email address.
3. Execution: Once they receive the link, attackers reset the password and gain full access.

This method needs no device access or complex hacking skills, making it easy for even amateur cybercriminals. DarkWebInformer highlights its simplicity and effectiveness.