TLDR · MISCELLANEOUS

THE NEWEST INSTAGRAM "EXPLOIT" IS THE GOOFIEST I'VE SEEN

0xsid.com3 min read

Summary from the TLDR newsletter

The recent slew of Instagram account takeovers was due to the exploitation of a simple vulnerability. Attackers simply tried to log onto target accounts using a VPN in a location close to the target and then told the Meta support AI that the account was hacked and to send verification codes to another email. There were no checks to see whether the emails belonged to the accounts. The vulnerability seems to have been patched, but it was exploited to take over accounts to be flipped or used for propaganda.