Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts
2026-06-06T19:23:29Z•499591a2c8235b186b280509dfb49d9e4ea07579f5c4c6a0eb84838de48e6741
account-takeoverai-social-engineeringaws-govcloudbotnetcanvascisacredential-exposuredata-extortionddosdoxing-ransomgithub-leakhosting-abusekimwolflaw-enforcementmeta-instagrampatch-tuesdayrussia-linked-opszero-day
What happened
Multiple high-impact incidents reported: attackers abused Meta’s AI support assistant to social-engineer password resets and briefly seize high‑profile Instagram accounts; a CISA contractor publicly exposed highly privileged AWS GovCloud keys and internal build/deploy secrets on GitHub, creating a severe federal credential and secrets exposure; a large-scale data‑extortion attack against the Canvas education platform disrupted classes and threatens data on ~275 million students/faculty; law enforcement in the Netherlands seized ~800 servers and arrested hosting operators accused of enabling俄罗斯
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 499591a2c8235b186b280509dfb49d9e4ea07579f5c4c6a0eb84838de48e6741
- Enrichment time
- 2026-06-06T19:23:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.