TLDR
Hackers are exploiting Meta's new AI customer support chatbot to hijack Instagram accounts, including high profile handles like the Obama White House and a US Space Force chief. The trick: an attacker uses a VPN near the target's hometown,...
How it works
Hackers are exploiting Meta's new AI customer support chatbot to hijack Instagram accounts, including high profile handles like the Obama White House and a US Space Force chief. The trick: an attacker uses a VPN near the target's hometown,...
Red flags
- : A password reset email or code you did not request arriving in your inbox. Login alerts or new device sessions from unfamiliar locations or IP ranges. Your email or phone number being silently changed on Instagram without your action
What to do
- 1: Enable the strongest multi factor authentication available on Instagram, ideally a passkey or hardware security key
- 2even SMS based 2FA would have blocked this attac
Source
krebs
Source reviewed by Mythos Forensic Team
https://krebsonsecurity.com/2026/06/hackers-used-metas-ai-support-bot-to-seize-instagram-accounts/FAQ
Is Instagram Account Hijack via Meta AI Support Bot: How It Works and How to Stay Safe a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
: A password reset email or code you did not request arriving in your inbox. Login alerts or new device sessions from unfamiliar locations or IP ranges. Your email or phone number being silently changed on Instagram without your action
What should I do first?
: Enable the strongest multi factor authentication available on Instagram, ideally a passkey or hardware security key; even SMS based 2FA would have blocked this attac
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.