Meta — the parent company of Facebook, Instagram, and WhatsApp — continues to integrate AI across its platform. Unfortunately, it appears the company overlooked a major flaw: Meta's AI support chatbot could apparently be tricked into providing unauthorized users with login access to any Instagram account.Over the past few days, a number of highly followed Instagram accounts were hacked. The Obama White House Instagram account, with 2.4 million followers, was compromised and posted a caption on Sunday that stated: "The White House is under Shiites' control." Other accounts, such as the official Instagram account belonging to the Chief Master Sergeant of Space Force, were also hacked.
This Tweet is currently unavailable. It might be loading or has been removed.
Soon after, sleuths on social media began sharing the news of these hacked accounts along with screen captures showcasing the alleged method used to take them over.
You May Also Like
The hackers say they weaponized an exploit that tricked Meta's AI support chatbot into simply handing over account access. The bad actor would simply tell the AI chatbot that it needed to reset a targeted Instagram account's password. However, the hacker would also inform the chatbot that they needed the password reset email, which includes the verification code to change the password, sent to a new email address. The email address, of course, belonged to the hackers, not the true account holder. The chatbot would apparently oblige the hacker's request and provide them with the password reset page for the account.
