Instagram’s Helper Bot Helps Hijackers Get Access to Your Account
By: Jim Stickley and Tina Davis
June 9, 2026
Just when you think we are all able to start embracing AI and all the wonderful tasks it can help us perform, such as plan a trip, create a recipe, write a savvy, yet effective email of complaint, Instagram users got an unsettling lesson recently. Reports emerged that hackers were exploiting Meta's AI-powered support assistant to hijack accounts when users requested help to recover their accounts. You read that correctly…using Meta’s own support bot!
According to security researchers and multiple published reports, attackers discovered a flaw in Meta's automated account recovery process that allowed them to convince the chatbot to associate a victim's Instagram account with an attacker-controlled email address. Once the email was linked, the attackers could trigger a password reset and gain control of the account.
Per Forbes, the attack went like this:
- The hacker presumably used a VPN to spoof the targets’ presumed location. This avoided triggering Instagram’s automated account protections.
- The hacker opened a chat with Meta AI Support Assistant.
- The hacker asked the bot to add a new email address to the target’s account.
- The chatbot sent a verification code to the email address provided by the hacker.
- The hacker shared the verification code with the chatbot.
- The chatbot to presented a button to reset the password.
- The hacker entered a new password and took over the victim’s account.
The technique reportedly targeted accounts that lacked strong protections and was used against several high-profile profiles, including government, corporate, and celebrity-related accounts.
You have some defense against this attack and others that might be like it.
- Enable multi-factor authentication on all of your accounts that give you the option. While emailing or texting a code is not the best method (as this attack revealed), it’s better than nothing at all.
- Review account recovery settings and make sure they are correct and still relevant.
- Remain on the lookout for unexpected password reset notifications. If you get them, go check your account, but not by clicking any links or attachments.
The vulnerability has now reportedly been patched and Meta has claimed that it is working to secure affected accounts. The number of users impacted has not been disclosed as of writing.
The incident highlights a growing challenge facing technology companies as AI systems take on more responsibilities traditionally handled by human support staff. When automated systems are granted access to sensitive functions such as password recovery, even a small design flaw can become a powerful weapon for cybercriminals.
SUBSCRIBE TO WEEKLY NEWSLETTER
