Meta confirms thousands of Instagram accounts hacked via AI chatbot abuse

Original: Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot

Meta says an AI-assisted Instagram recovery flaw let attackers reset passwords and hijack thousands of accounts.

Meta confirmed a vulnerability in Instagram’s AI-assisted account recovery system that let attackers redirect password reset links to attacker-controlled emails. At least 20,225 users were notified, with compromised accounts potentially exposing profile data, posts, direct messages, and activity. Meta says it has disabled the affected chatbot flow, removed the vulnerable code path, and asked impacted users to reset passwords through verified channels.

摘要由 AI 整理,以原文為準。