Hackers hijacked high-profile Instagram accounts by simply asking Meta's AI chatbot to change the email

Hackers abused Meta’s AI support chatbot to request Instagram email changes, then used the confirmation flow to reset passwords and take over accounts.

The campaign hit high-profile targets and valuable short usernames, with some handles later resold on Telegram.

Researchers say the attack also used AI-generated selfie videos to bypass automated identity checks in some cases.

Meta issued an emergency fix that disabled the vulnerable AI-driven account-recovery path.