Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts

2026-06-07T07:23:27Z11768fc2aefdce0c1f5792bae9f87f53dd3dbbba87c549b1ad3bbb74c538ea92
account-takeoverai-social-engineeringanti-ddos-abuseaws-govcloudbluehammer (nickname)botnetcanvascisacredential-exposuredata-extortiondatalossddosdoublesupply-infrastructuredoxinggithub-leakinstagramkimwolflaw-enforcement-actionmetamicrosoftpatch-tuesdayrussian-cyber-operationsserver-seizuresharepointwindows-defender

What happened

Multiple high-impact incidents reported across U.S. and international targets: attackers published instructions to abuse Meta’s AI support bot to reset Instagram account passwords and briefly deface high-profile accounts; a CISA contractor publicly exposed highly privileged AWS GovCloud credentials and internal secrets on GitHub; a large-scale Canvas data-extortion incident threatened data on ~275 million students and staff; Dutch authorities seized ~800 servers and arrested hosting co-owners tied to Russian cyber operations. Other notable items: arrest of the alleged Kimwolf IoT botnet author

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
krebs_on_security
Record identifier
11768fc2aefdce0c1f5792bae9f87f53dd3dbbba87c549b1ad3bbb74c538ea92
Enrichment time
2026-06-07T07:23:27Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.