Pro-Iran hackers tricked Meta's AI support bot into resetting Instagram passwords
Pro-Iran hackers abused Meta's AI support assistant to hijack high-value Instagram accounts, briefly defacing the Obama White House and U.S. Space Force senior-enlisted-leader handles with pro-Iranian imagery. Brian Krebs reports a Telegram video showed the method: connect via VPN near the target's hometown, request a password reset, then tell the AI chat to link a new email — which it sent a one-time reset code to. Attackers claimed names worth over $500,000 and said the trick failed against MFA-protected accounts. Meta's Andy Stone said the issue was resolved via an emergency weekend patch, with no back-end breach. Wiring conversational AI into account-recovery flows makes it a social-engineering target once it can take privileged action.