Hackers Abuse Meta’s AI Recovery Tools to Hijack Instagram Accounts

Attackers reportedly exploited weaknesses in Meta’s AI-powered Instagram account recovery process to hijack high-value accounts, including rare usernames and several prominent profiles. According to reports, the attackers used AI-generated selfie videos created from publicly available photos, combined with password recovery workflows, to bypass identity verification and gain control of accounts. Stolen accounts were allegedly listed for sale on Telegram within minutes, while victims struggled to regain access through automated support systems. Meta said it has patched the issue and stated there was no breach of its systems, but the incident has raised concerns about the security risks of AI-driven account recovery mechanisms.

Reference: cybernews.com