Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts
2026-06-04T19:23:29Z•cf1333584f0aaddea9e4b49aaadc50e7bbbe34b62f18841e5106b8421d25592d
AI social engineeringAWS GovCloudCISACanvasDDoSInstagramIoT botnetKimwolfMetaMicrosoft SharePointPatch TuesdayRussia-linked activityTelegramaccount takeoveranti-DDoS abusebotnetcredential exposuredata extortiondata leakeducation sectorhosting abuselaw enforcementtaking down infrastructurevulnerability patchingzero-day
What happened
KrebsOnSecurity stories from Apr–Jun 2026 describe multiple high-impact incidents: attackers abused Meta’s AI support assistant to perform Instagram account takeovers; a massive CISA contractor leak exposed privileged AWS GovCloud keys and internal build/deploy docs; a large Canvas data-extortion incident disrupted schools and threatened data on ~275M users; law enforcement seized ~800 servers tied to Russian influence operations and arrested hosting company co-owners; a suspected Kimwolf IoT botnet operator was arrested; an anti‑DDoS vendor was found enabling large DDoS campaigns in Brazil; a
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- cf1333584f0aaddea9e4b49aaadc50e7bbbe34b62f18841e5106b8421d25592d
- Enrichment time
- 2026-06-04T19:23:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.