The Newest Instagram Exploit: AI-Assisted Recovery Hijacks Accounts
Summary
The article details a novel Instagram account takeover flow that abuses the recovery process and AI-assisted verification to hijack accounts, bypass 2FA, and redirect verification codes to attackers. It notes the existence of black markets and that Meta patched the flaw after weeks, underscoring weaknesses in social media identity verification and recovery workflows.