There have been previous reports of hackers stealing large quantities of Instagram accounts by seducing Meta AI robots. According to leaked data submitted by Meta last week to the Office of the Attorney General of Maine, at least 20225 accounts were stolen.
Meta wrote in its circular that hackers through this loophole took over the user ‘ s entire Instagram account and all associated accounts, including contact details, date of birth and personal information information, as well as access to user posts, private letters and account activities. Meta confirmed that the incident related to a “instagram AI aid account restoration system” and was used to “replace the Instagram account password”.
As previously reported, the Meta AI robotic loophole allows anyone to reset the password on an unopened double-certification account, which has been abused by outlaws. Hackers send requests to chat robots simply to induce them to send the authentication code to a hacker-controlled e-mail address rather than an e-mail maintained by the account holder.
Meta states: “The tool itself works and functions are in line with expectations; however, due to an error in another code path, the system was unable to verify correctly whether the mailbox provided by the individual requesting the replacement password was in line with the related mailbox of the user Instagram account. As a result, the system wrongly reset the password link to the mailbox provided by the outlaw. “Meta states that hackers can reset the password and take over the account like account owners.
Meta stated that it was “not clear at present” whether the personal information stored in the stolen accounts had been disclosed. However, the outlaws may have obtained personal data information, e-mail addresses, telephone numbers, birth dates, private correspondence content, social media posts and historical records of account activities and interactions.
In Maine, hacking started around 17 April and continued until this week, when Meta repaired the AI robot. It was reported that Instagram had begun notifying the affected users earlier last week to reset the password, although there were also users at that time who indicated that hacker attacks were continuing.
Meta also confirmed in the circular that users had been reminded to protect the security of the account and that “affected users had been instructed to reset the password and to re-certify through secure and verified channels”. Meta stressed that the AI robot had been banned and the code path allowing it to reset user accounts had been removed. It also indicated that other AI robots on the sub-flagged platform were being inspected to prevent similar incidents.
The circumstances that led to the misuse of the AI are not yet clear, but just recently, Meta had just laid off several thousand people, while issuing equity incentives to executives, and the company was constantly increasing its input into artificial intelligence.