Instagram Meta AI Flaw Let Attackers Hijack High-Value Accounts by Tricking Chatbot Into Sending Password Reset Codes
A logic-layer vulnerability in Instagram's Meta AI account recovery tool allowed attackers to hijack premium short-handle accounts by tricking the chatbot into forwarding password reset codes without any identity verification.
A critical flaw in Meta's AI-powered account recovery tool on Instagram allowed attackers to hijack high-value accounts by tricking the chatbot into forwarding password reset codes with no verification required. Security researchers ZachXBT and Dark Web Informer were among the first to publicly expose the vulnerability, revealing that threat actors had found a way to manipulate Instagram's Meta AI assistant — a tool designed to help users recover access to their accounts.
Attackers engaged the AI chatbot in conversation and prompted it to forward password reset codes to unauthorized parties, entirely bypassing identity verification checks. The flaw stemmed from insufficient controls in how the AI processed account recovery requests, effectively allowing anyone who knew a target's username to initiate the takeover process. The exploit was not a traditional server breach — Meta confirmed no backend systems were compromised. Instead, the vulnerability lived in the AI's logic layer, which lacked proper rate-limiting or authentication enforcement before acting on reset requests.
Attackers deliberately targeted premium, short-handle Instagram accounts, including high-profile usernames such as @hey and @jowo — known in underground markets for their resale value. These coveted accounts, some valued at over $1 million combined, were quickly flipped through private Telegram channels before Meta could intervene. The speed of the operation highlighted how organized and financially motivated threat actors have become in exploiting social media platform vulnerabilities. Dark Web Informer confirmed the sales activity, tracking stolen account listings circulating across Telegram groups in real time — a tactic increasingly common in the account-takeover-as-a-service ecosystem.
Meta moved to patch the vulnerability late Friday after reports surfaced online. In an official statement, the company said: "We fixed an issue that allowed an external party to request password reset emails for some Instagram users. There was no breach of our systems and people's Instagram accounts remain secure." Despite the patch, the incident raised serious questions about the security architecture surrounding AI-assisted support tools and their access to sensitive account recovery functions.
Accounts protected by two-factor authentication (2FA) were not compromised during this attack. Security experts now strongly recommend enabling app-based 2FA (e.g., Google Authenticator or Authy) instead of SMS-based verification, using a private dedicated email not publicly associated with your Instagram profile, avoiding password reuse across platforms, regularly reviewing login activity under Instagram's Security Settings, and storing backup codes securely in case of emergency account recovery.
Meta's hasty patch underscores a growing concern: as AI tools gain deeper access to account management functions, their vulnerability to social engineering becomes a critical attack surface that demands far stricter safeguards. The incident serves as a stark reminder that AI-powered customer support and account recovery features must be designed with robust authentication and rate-limiting controls to prevent abuse.