#14415
-
"The Newest Instagram Exploit is the Goofiest I've Seen" https://www.0xsid.com/blog/meta-account-takeover-fiasco
You'd think this kind of vulnerability wouldn't happen to the big players.
According to the post, an attacker would:
1. find the victim's username
2. use a VPN near the victim's location
3. claim to Meta's #ai support that the victim's account has been hacked and ask to send the verification codes to an arbitrary email
4. use the codes to reset the password and take over the account
https://xcancel.com/DarkWebInformer/status/2061253599758315527 01/06/2026 à 22:10
Joint