Meta’s AI support chatbot proved unusually helpful to hackers looking to steal and resell notable Instagram accounts—the hackers simply asking the bot to change the accounts’ associated email addresses while using VPN to mask their true locations.
Videos featuring the “shockingly easy” exploit have been circulating among Telegram groups for hackers and security researchers, according to 404 Media. The exploit allowed hackers to take over and flip valuable Instagram accounts worth hundreds of thousands of dollars on the gray market before Meta implemented an emergency patch on May 29. The Barack Obama White House account and the Chief Master Sergeant of Space Force’s account also posted pro-Iranian images and messages while they were temporarily compromised.
Attackers simply had to use a VPN to approximately match their location to the target Instagram account’s region, begin a password reset process, and then ask Meta’s AI support chatbot to change the email address associated with the account, according to 404 Media. It’s a very straightforward prompt injection attack.
© Marcin Golba/NurPhoto via Getty Images
Meta’s AI support chatbot proved unusually helpful to hackers looking to steal and resell notable Instagram accounts—the hackers simply asking the bot to change the accounts’ associated email addresses while using VPN to mask their true locations.
Videos featuring the “shockingly easy” exploit have been circulating among Telegram groups for hackers and security researchers, according to 404 Media. The exploit allowed hackers to take over and flip valuable Instagram accounts worth hundreds of thousands of dollars on the gray market before Meta implemented an emergency patch on May 29. The Barack Obama White House account and the Chief Master Sergeant of Space Force’s account also posted pro-Iranian images and messages while they were temporarily compromised.
Attackers simply had to use a VPN to approximately match their location to the target Instagram account’s region, begin a password reset process, and then ask Meta’s AI support chatbot to change the email address associated with the account, according to 404 Media. It’s a very straightforward prompt injection attack.
© Marcin Golba/NurPhoto via Getty Images
On Monday, Florida became the first state to sue OpenAI over ChatGPT's allegedly dangerous design.
In a complaint filed in state court, Florida Attorney General James Uthmeier accused OpenAI and its CEO, Sam Altman, of prioritizing profits over the safety of Floridians.
The civil lawsuit comes after Florida opened an unrelated criminal probe into OpenAI, following a ChatGPT-linked mass shooting where two people were killed at Florida State University. In statements, OpenAI has insisted that ChatGPT isn't responsible for the FSU shooting, merely providing factual information, but Uthmeier does not seem to agree. In his complaint, Uthmeier noted that Florida has now been blindsided by two violent events where suspects used ChatGPT to assist in planning.
© Anna Moneymaker / Staff | Getty Images News
On Monday, Florida became the first state to sue OpenAI over ChatGPT's allegedly dangerous design.
In a complaint filed in state court, Florida Attorney General James Uthmeier accused OpenAI and its CEO, Sam Altman, of prioritizing profits over the safety of Floridians.
The civil lawsuit comes after Florida opened an unrelated criminal probe into OpenAI, following a ChatGPT-linked mass shooting where two people were killed at Florida State University. In statements, OpenAI has insisted that ChatGPT isn't responsible for the FSU shooting, merely providing factual information, but Uthmeier does not seem to agree. In his complaint, Uthmeier noted that Florida has now been blindsided by two violent events where suspects used ChatGPT to assist in planning.
© Anna Moneymaker / Staff | Getty Images News
Login
