A significant security flaw has been exploited, leading to the compromise of over 20,000 Instagram accounts.

Attackers have discovered a way to manipulate Meta’s AI-powered customer support bot, specifically during the password reset process. By tricking the automation, malicious actors were able to bypass security measures and link compromised accounts to unauthorized email addresses, effectively hijacking them.

How to protect your account:

1- Enable Two-Factor Authentication (2FA): Use an authenticator app (like Google Authenticator or Duo) rather than SMS-based 2FA if possible.

Review Linked Contact Information: Go to your Instagram account settings and verify that the email addresses and phone numbers linked to your account are ones you control.

2- Audit Linked Accounts: Regularly check for any suspicious unauthorized access or unrecognized linked email addresses in your Meta Accounts Center.

3- Stay Vigilant: If you receive unexpected password reset notifications or emails regarding changes to your account settings, treat them as high-priority security incidents.

This incident is a sobering reminder that even automated customer support systems can become a significant attack vector. Always ensure your recovery information is up-to-date and protected by the strongest security settings available.

#CyberSecurity #InstagramSecurity #Meta #DataBreach #InfoSec #DigitalSafety