β οΈ UPDATE: The 2 major Instagram exploits we posted about are getting abused after quietly working for months.
The method lets attackers take over accounts by using a VPN to match the accountβs country region, starting a password reset, then convincing Metaβs AI support to swap the email.
High-value usernames like
@hey have reportedly been stolen, with over $1M in accounts already pulled over the past 3 days.