Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts

2026-06-05T07:23:29Z539e49470a59a2b90bd667a4a901389a34ba2094cafb4419eb55a02c73390f9f
AI social engineeringAWS GovCloudBlueHammerCISACanvas breachDDoSGitHub leakGoogle ChromeInstagramIoT botnetKimwolfMetaPatch TuesdayRussian cyber operationsScattered Spideraccount takeoveranti-DDoS misusecredential exposuredata leakeducation sectorhosting abuselaw enforcementransom/extortionserver seizurezero-day

What happened

This collection of KrebsOnSecurity reports documents multiple high-impact cyber incidents and law enforcement actions in 2026: attackers manipulated Meta’s AI support assistant to reset Instagram account passwords and briefly deface high-profile accounts; a CISA contractor publicly exposed highly privileged AWS GovCloud keys and internal build/deploy secrets on GitHub; Dutch authorities seized ~800 servers and arrested two operators accused of hosting infrastructure used for Russian cyberattacks and influence ops; the alleged Kimwolf IoT botnet operator was arrested and charged in Canada and U

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
krebs_on_security
Record identifier
539e49470a59a2b90bd667a4a901389a34ba2094cafb4419eb55a02c73390f9f
Enrichment time
2026-06-05T07:23:29Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts · Baitaphish