NCCapital

Security researcher Jane Wong revealed that her Instagram account was compromised. “The password got changed without my knowledge and I was getting different password reset attempts throughout yesterday,” Wong said. “Quite concerning.”

A video circulating on X demonstrates the step-by-step process used by the hacker. The attacker allegedly used a VPN to spoof the target’s location and avoid triggering Instagram’s security protections.

The hacker then initiated a chat with Meta AI Support Assistant and requested to add a new email address to the victim’s account. The chatbot reportedly sent a verification code to the hacker’s provided email. After the hacker relayed the code back to the AI assistant, it allowed the attacker to reset the password and fully take over the account.