Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts
2026-06-04T01:23:28Z•f6a1e6695c70ef2fd3debcd7c8c71bb230b70e3e62d60d53e15bb8ffb266e103
account-takeoverai-social-engineeringaws-govcloudbotnetcanvascisadata-extortiondata-leakddosgithub-credentials-leakhosting-seizureiot-botnetlaw-enforcement-arrestmeta-instagramrussian-influence-operationsvulnerability-patchingzero-day
What happened
Multiple high-impact security incidents and law-enforcement actions were reported by KrebsOnSecurity in April–June 2026: attackers weaponized Meta’s AI support assistant via Telegram instructions to reset Instagram passwords and briefly hijack high-profile accounts; a CISA contractor accidentally published AWS GovCloud credentials and internal build/deploy artifacts to a public GitHub repo, prompting congressional inquiries and large-scale remediation; the Netherlands seized ~800 servers and arrested operators of hosting firms accused of supporting Russian cyber operations; a Canadian national
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- f6a1e6695c70ef2fd3debcd7c8c71bb230b70e3e62d60d53e15bb8ffb266e103
- Enrichment time
- 2026-06-04T01:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.