Researchers warn Meta's AI Instagram support can be tricked to email password reset links
Posts on X and a now-removed Hacker News thread describe a prompt that convinces the AI agent to send reset links to attacker emails without identity checks; posters say takeovers are active and urge users to lock down email and 2FA.
By Ryan Merket · Published
Primary source: news.ycombinator.com
Why it matters
Link rot across social and aggregator platforms can erase the context around launches and incidents. Founders who ship on X should mirror key posts to durable URLs so customers and press can verify claims later.
Security researchers and OSINT accounts on X are circulating a method to take over Instagram accounts by manipulating Meta's AI-powered support agent into sending password reset links to attacker-controlled email addresses. The claims originated in a now-removed Hacker News submission and were amplified by posts from @weezerOSINT, @darkrai, and @naderlow999.…