Meta's AI Chatbot Flaw Exposed: Hackers Hijack High-Profile Instagram Accounts
Hackers exploited a vulnerability in Meta's AI support chatbot to hijack prominent Instagram accounts, including the Obama White House page, by simply requesting an email change.

AI Chatbot Flaw Exposed: Hackers Hijack High-Profile Instagram Accounts">
In a stunning revelation, hackers have successfully hijacked several high-profile Instagram accounts, including the official page of the Obama White House, by exploiting a vulnerability in Meta's AI support chatbot. The attackers managed to bypass two-factor authentication entirely, raising serious concerns about the security of the platform. The hack was achieved by simply asking the Meta AI chatbot to change the email address on file for the targeted accounts.
This alarming flaw allowed hackers to gain control of prominent accounts without needing to know the account's password or gain access to its associated email. Meta has since patched the vulnerability, but security researchers warn that another exploit is already circulating on Telegram, suggesting that the issue may not be entirely resolved. The swift patching of the flaw is a positive step, but the fact that another exploit is already emerging underscores the ongoing challenges in securing social media platforms.
The Decoder first reported on this security lapse. As social media continues to play an increasingly critical role in modern life, incidents like this highlight the need for robust security measures to protect both personal and public accounts. The ability of hackers to manipulate Meta's AI chatbot into altering account details raises questions about the company's security protocols and the potential for future vulnerabilities.
As the digital landscape continues to evolve, both Meta and other tech giants will need to remain vigilant in the face of emerging threats. The incident serves as a reminder of the delicate balance between leveraging AI for support and ensuring the security and integrity of user accounts. As AI becomes more integrated into customer support, companies must prioritize the security of these systems to prevent similar incidents in the future.
Source: The Decoder