Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts
2026-06-07T07:23:27Z•11768fc2aefdce0c1f5792bae9f87f53dd3dbbba87c549b1ad3bbb74c538ea92
account-takeoverai-social-engineeringanti-ddos-abuseaws-govcloudbluehammer (nickname)botnetcanvascisacredential-exposuredata-extortiondatalossddosdoublesupply-infrastructuredoxinggithub-leakinstagramkimwolflaw-enforcement-actionmetamicrosoftpatch-tuesdayrussian-cyber-operationsserver-seizuresharepointwindows-defender
What happened
Multiple high-impact incidents reported across U.S. and international targets: attackers published instructions to abuse Meta’s AI support bot to reset Instagram account passwords and briefly deface high-profile accounts; a CISA contractor publicly exposed highly privileged AWS GovCloud credentials and internal secrets on GitHub; a large-scale Canvas data-extortion incident threatened data on ~275 million students and staff; Dutch authorities seized ~800 servers and arrested hosting co-owners tied to Russian cyber operations. Other notable items: arrest of the alleged Kimwolf IoT botnet author
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 11768fc2aefdce0c1f5792bae9f87f53dd3dbbba87c549b1ad3bbb74c538ea92
- Enrichment time
- 2026-06-07T07:23:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.