People are being targeted via Instagram after hackers worked out how to social-engineer Meta’s AI support bot into resetting passwords. Once they’re in, they lock the real owner out and take over the account. It’s proof that even an official help tool can be played.
The move
Turn on two-factor authentication now, so a password reset alone can’t get anyone into your account.
Seen via Krebs on Security