Meta AI Exploit Leads to Widespread Instagram Account Hijack

Meta is currently addressing a critical security vulnerability where hackers have used the Meta AI chatbot to perform Instagram account hijacking. The breach involved attackers using simple text prompts to manipulate the automated support system, allowing them to change the email addresses associated with target profiles. Once the linked email was altered, the attackers gained full access to the accounts, effectively locking out the original owners and bypassing standard security checks.

The vulnerability has impacted a wide range of users, including high-profile dormant pages belonging to Sephora and the White House. Reports indicate that the exploit was powerful enough to bypass two-factor authentication (2FA), a security measure typically designed to prevent such unauthorized access. Jane Manchun Wong, a well-known reverse engineer, noted that even with 2FA active, a secondary account was compromised through this method, highlighting a significant flaw in how the AI handles identity verification.

Ongoing Risks for Instagram Users

While Meta has stated that the Instagram account hijacking issue is resolved, fresh reports from users on platforms like Reddit and Telegram suggest the exploit may still be active. Meta Vice President of Communications Andy Stone confirmed that the company is working to protect those affected and has begun sending out official warnings to potentially impacted users. However, the persistence of new compromise reports has raised concerns about the effectiveness of the initial patch applied to the automated system.

The method used by hackers involved tricking the AI into believing the attacker was the legitimate owner requesting an account recovery. By providing specific text-based instructions, the chatbot would update the primary contact information without requiring the usual verification codes from the existing email or phone number. This automated failure has forced Meta to re-examine how its AI tools interact with sensitive account data and user permissions across its entire social media ecosystem.

To protect their digital presence, users should monitor their accounts for any unauthorized changes to contact information or linked devices. If an unexpected email change notification arrives, it is important to act immediately through the official Instagram help center. Meta continues to investigate the automated user assistance processes that allowed these text-based prompts to override standard security protocols, and more updates are expected as the company strengthens its AI safeguards.

While we strive for accuracy, bytevyte can make mistakes. Users are advised to verify all information independently. We accept no liability for errors or omissions.

AI-generated image.

✔Human Verified

Ongoing Risks for Instagram Users

Related Articles