Hackers hijack Instagram accounts by exploiting Meta's AI chatbot to change emails without verification

Summary

Hackers exploited Meta's AI customer support chatbot on Instagram to hijack high-profile accounts by tricking it into changing account email addresses without proper identity verification. The attackers then reset passwords and locked out owners. The exploit spread via Telegram channels where stolen handles were advertised. Compromised accounts included the dormant Obama White House Instagram profile (used to post unauthorized AI-generated images) and US Space Force chief master sergeant John Bentivegna's account. Meta claimed the issue was fixed, but reports indicated the exploit continued working.