Hackers Just Asked Meta AI for Instagram Accounts — It Said Yes

Hackers didn't crack any code — they politely asked Meta's AI support bot to swap the email on an account.

It's a classic 'confused deputy' flaw: a bot with admin powers tricked into using them for a stranger.

Accounts protected by two-factor authentication — even basic SMS — largely survived the attack.

Meta says it has fixed the flaw, found no system breach, and is alerting targeted users.

For Indian creators and brands, MFA plus an authenticator app is now non-negotiable.