Hackers Exploit Meta AI Chatbot to Access Instagram Accounts

Hackers were able to exploit Meta's AI support chatbot to gain access to and steal notable Instagram accounts by requesting changes to the associated email addresses while using a VPN to disguise their locations. This method was highlighted in videos shared within Telegram groups for hackers and security researchers. The exploit enabled the takeover of valuable Instagram accounts, which were then resold on the gray market, with some accounts valued at hundreds of thousands of dollars. Notable accounts, including those of the Barack Obama White House and the Chief Master Sergeant of Space Force, were temporarily compromised and posted pro-Iranian content. Meta implemented an emergency patch on May 29 to address this vulnerability. The attack involved a straightforward prompt injection technique, where attackers matched their VPN location to the target account's region and initiated a password reset process.