Instagram has resolved a troubling security vulnerability that enabled attackers to hijack user accounts by exploiting Meta's AI-powered support chatbot. Reports surfaced over the weekend on platforms like Reddit and X, with numerous users noting unauthorized access to their profiles.

Security expert Jane Wong was one of the victims, as noted by TechCrunch. She mentioned that her password was altered without notice, accompanied by multiple reset attempts. This situation raised significant concerns.

How the exploit functioned

A demonstration shared on X illustrated the straightforward method employed. Attackers utilized a VPN to mask their location and evade Instagram's security measures. They then initiated a conversation with Meta's AI Support Assistant, requesting the addition of a new email to the targeted account.

The surprising element occurred next. The AI chatbot dispatched a verification code to the attacker's email instead of the account holder's. Upon receiving and relaying this code, the chatbot provided an option to change the password. This process allowed complete takeover of any Instagram account with minimal effort.

Verification from TechCrunch confirmed that the code indeed arrived in the attacker's inbox, validating the method's effectiveness.

Potential risks to accounts

What makes this vulnerability particularly alarming is the absence of any requirement for the victim's actual email access. The attack completely circumvented the legitimate owner.

Meta representative Andy Stone announced on Monday that the flaw has been addressed. The extent of affected accounts prior to the fix remains unknown. Users can now rest assured that this specific threat has been eliminated.

AI's role in customer service

Issues such as increasing costs of electronics, simplified fraud tactics, and academic integrity challenges due to AI highlight some negative impacts of the technology.

Particularly frustrating is the use of AI in support interactions. In one instance involving a delayed meal order, the AI chatbot prevented access to human assistance for hours, insisting on imminent delivery.

Prior to AI implementation, human agents resolved such matters swiftly. Meta's chatbot exemplifies how AI in customer support can introduce avoidable frustrations.