Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts

2026-06-04T19:23:29Zcf1333584f0aaddea9e4b49aaadc50e7bbbe34b62f18841e5106b8421d25592d
AI social engineeringAWS GovCloudCISACanvasDDoSInstagramIoT botnetKimwolfMetaMicrosoft SharePointPatch TuesdayRussia-linked activityTelegramaccount takeoveranti-DDoS abusebotnetcredential exposuredata extortiondata leakeducation sectorhosting abuselaw enforcementtaking down infrastructurevulnerability patchingzero-day

What happened

KrebsOnSecurity stories from Apr–Jun 2026 describe multiple high-impact incidents: attackers abused Meta’s AI support assistant to perform Instagram account takeovers; a massive CISA contractor leak exposed privileged AWS GovCloud keys and internal build/deploy docs; a large Canvas data-extortion incident disrupted schools and threatened data on ~275M users; law enforcement seized ~800 servers tied to Russian influence operations and arrested hosting company co-owners; a suspected Kimwolf IoT botnet operator was arrested; an anti‑DDoS vendor was found enabling large DDoS campaigns in Brazil; a

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
krebs_on_security
Record identifier
cf1333584f0aaddea9e4b49aaadc50e7bbbe34b62f18841e5106b8421d25592d
Enrichment time
2026-06-04T19:23:29Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.