Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts
2026-06-08T13:23:32Z•9289ef365afcd59faf7406fecc16ba532eaadafd180d1d282ec54e67690afd7e
AI exploitationAWS GovCloudCISACanvasDDoSInstagramIoT botnetKimwolfMetaNetherlandsRussian influence operationsTelegramaccount takeoverbotnetcongressional inquirycredential compromisedata extortiondata leakhosting abusepassword resetpublic GitHub leakransom demandserver seizuresocial engineeringstark industries solutions (infrastructure)
What happened
Multiple high-impact security incidents reported: attackers abused Meta’s AI support assistant to reset Instagram passwords and briefly deface high-profile accounts; a CISA contractor publicly leaked highly privileged AWS GovCloud credentials and internal build/deployment artifacts on GitHub, triggering congressional inquiries; a large-scale Canvas data extortion/defacement disrupted education services and threatened data on ~275 million users; law enforcement in the Netherlands seized ~800 servers tied to Russian cyber influence operations; the alleged Kimwolf IoT botnet operator was arrested
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 9289ef365afcd59faf7406fecc16ba532eaadafd180d1d282ec54e67690afd7e
- Enrichment time
- 2026-06-08T13:23:32Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.