Meta AI-powered support tools abused in Instagram account recovery flow
Security Tool/Service
Summary
Hide ▲
Show ▼
Instagram accounts were hijacked after attackers abused Meta’s AI-powered support tools to pass recovery checks and change the recovery email, creating a direct failure in automated identity verification. The abuse reportedly leveraged selfie verification and AI-generated video and could bypass 2FA, leaving victims stuck in AI-only support loops with no human escalation. Reported targets included a White House team account, Jane Manchun Wong, @hey, and @korn, and Meta said the issue had been resolved and impacted accounts were being secured.
Related Happenings
Instagram accounts for Obama White House hit by account takeover attack
Incident
First: 01.06.2026 20:32
Last: 01.06.2026 20:32
Sources 1
How related:
Multiple Instagram users had their accounts hijacked after attackers convinced Meta’s AI-powered support tools that they were the legitimate owners.
About this happening:
The **Instagram** accounts for the **Obama White House** and the **Chief Master Sergeant of the U.S. Space Force** were briefly **defaced** after attackers abused **Meta’s AI supp...
Instagram accounts for Obama White House hit by account takeover attack
IncidentHow related: Multiple Instagram users had their accounts hijacked after attackers convinced Meta’s AI-powered support tools that they were the legitimate owners.
About this happening: The **Instagram** accounts for the **Obama White House** and the **Chief Master Sergeant of the U.S. Space Force** were briefly **defaced** after attackers abused **Meta’s AI supp...
Ramanan Pathmanathan eight-year sextortion campaign targeting 145+ children
Campaign
First: 28.05.2026 12:25
Last: 28.05.2026 12:25
Sources 1
About this happening:
A **Ramanan Pathmanathan** sextortion campaign targeted **more than 145 children** across the **United States**, using fake social accounts and video chats to coerce minors and ca...
Ramanan Pathmanathan eight-year sextortion campaign targeting 145+ children
CampaignAbout this happening: A **Ramanan Pathmanathan** sextortion campaign targeted **more than 145 children** across the **United States**, using fake social accounts and video chats to coerce minors and ca...
AccountDumpling Google AppSheet Facebook phishing campaign
Campaign
First: 01.05.2026 21:09
Last: 01.05.2026 21:09
Sources 1
About this happening:
A **Vietnamese-linked** operation dubbed **AccountDumpling** is using **Google AppSheet** as a phishing relay to steal **Facebook** credentials, enabling account takeover at scale...
AccountDumpling Google AppSheet Facebook phishing campaign
CampaignAbout this happening: A **Vietnamese-linked** operation dubbed **AccountDumpling** is using **Google AppSheet** as a phishing relay to steal **Facebook** credentials, enabling account takeover at scale...
Unnamed high-profile Lebanese journalist hit by network compromise
Incident
First: 09.04.2026 13:45
Last: 09.04.2026 13:45
Sources 1
About this happening:
An **unnamed high-profile Lebanese journalist** had an **Apple account** successfully compromised in **2025**, creating unauthorized access to a personal and professional identity...
Unnamed high-profile Lebanese journalist hit by network compromise
IncidentAbout this happening: An **unnamed high-profile Lebanese journalist** had an **Apple account** successfully compromised in **2025**, creating unauthorized access to a personal and professional identity...
Meta rolls out anti-scam tools for WhatsApp, Facebook, and Messenger
Security Tool/Service
First: 12.03.2026 15:17
Last: 12.03.2026 15:17
Sources 1
About this happening:
Meta introduced **new anti-scam protections** across **WhatsApp**, **Facebook**, and **Messenger**, adding warnings and detection features to reduce scam abuse against users. The...
Meta rolls out anti-scam tools for WhatsApp, Facebook, and Messenger
Security Tool/ServiceAbout this happening: Meta introduced **new anti-scam protections** across **WhatsApp**, **Facebook**, and **Messenger**, adding warnings and detection features to reduce scam abuse against users. The...
Timeline
-
02.06.2026 18:47 2 articles · 1h ago
Instagram account takeovers exploit Meta AI support tools
Initial DisclosureAttackers abused Meta’s AI-powered support tools in Instagram account recovery to convince the system they were the legitimate owners, change the associated email address, and reset access, leaving multiple users locked out of rare or high-value accounts including one previously used by the Obama White House team, one belonging to app researcher Jane Manchun Wong, @hey, and @korn; Meta’s vice president of communications said the issue had been resolved and impacted accounts were being secured.
Show sources
- Instagram users locked out after Meta AI abused to steal accounts — www.bleepingcomputer.com — 02.06.2026 18:47
- Instagram users locked out after Meta AI abused to steal accounts — www.bleepingcomputer.com — 02.06.2026 18:47