Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts
2026-06-06T07:23:26Z•f0ce51393b9c9a441cf4f0b3b7ffb684739a2754f9fde0b65d66b468c8ecfc1b
AI social engineeringAWS GovCloudCISADDoSInstagram compromiseIoTPatch Tuesdayaccount takeoverbotnetcredential exposuredata extortiondata leaklaw enforcement seizuresransom/dox threatsanctions evasionvulnerability patchingzero-day
What happened
A cluster of high-impact incidents reported by KrebsOnSecurity in spring 2026: a CISA contractor publicly leaked highly privileged AWS GovCloud credentials and internal build/deploy secrets on GitHub; a large Canvas data-extortion incident disrupted schools and threatened data on ~275M students/faculty; attackers abused Meta’s AI support assistant to social‑engineer Instagram password resets and briefly seize high-profile accounts; law enforcement actions included Dutch seizures of ~800 servers tied to Russian cyber operations and the arrest of an alleged Kimwolf IoT botnet operator (plus a Sc
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- f0ce51393b9c9a441cf4f0b3b7ffb684739a2754f9fde0b65d66b468c8ecfc1b
- Enrichment time
- 2026-06-06T07:23:26Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.