manipulate

Villain. Cybersecurity, social engineering, gaming, horror movies. Former crypto trillionaire.

[manipulate @manipulate]

One final post on this, please ignore all the “recovery service” posts below. It’s all bullshit. Don’t trust anyone to get your account back.

[manipulate @manipulate]

I kept telling everyone the Instagram exploit is not "patched" because AI is not linear. The exploit evolves so long as the tooling is still there.

I just had one of my OG accounts hit. Got it back but this is June 2, 2026 almost two days post patch.

[manipulate @manipulate]

Forget the Instagram exploit for a minute. Here’s the real story nobody is talking about.

AI is here to stay. Every day we trust it with a little more. It automates work, saves time, and in many cases does a pretty good job.

The Instagram incident is a glimpse of what’s coming.

Whether this specific issue was prompt injection, workflow abuse, or something else entirely almost doesn’t matter. What matters is that we’re putting AI in front of more and more systems and giving it access to more and more data.

This won’t be the last time we see something like this.

Today it was an Instagram account.

Tomorrow it could be your bank account, your smart home, your car, or something else entirely. Every week there are new MCP servers, integrations, agents, and tools being released. Many of them have access to data and permissions that people assume are private and secure.

The uncomfortable reality is that large language models are susceptible to manipulation. They can be tricked. They can be influenced. They can be exploited.

Prompt injection and prompt exploitation are not theoretical problems. They are real security challenges, and they’re not easily solved.

What happened today wasn’t an isolated event.

It was a preview.

[foreign @foreignsyrup]

It's a ban wave right now. Every server is getting deleted and people are getting limited.

[Lorenzo Franceschi-Bicchierai @lorenzofb]

NEW: Instagram is notifying victims of massive hacking campaign that relied on asking Meta AI support chatbot to hand over control of accounts.

The hacks apparently continued on Tuesday even though an Instagram spokesperson said on Monday that “the issue has already been fixed.”

[manipulate @manipulate]

Chat... so many girls want to talk to me. I guess they saw my crypto wallet.

[manipulate @manipulate]

Shoutout to @lorenzofb, always have been a fan of his work. Great write up on the Instagram situation.

https://t.co/9v8Ku7jGiY

[Lain on the Blockchain @CryptoCyberia]

Slop commits are hammering almost rvery single FOSS repo.
It doesn't make sense at all to ban LLMs for people who know what they're doing.
I don't know what the solution is between banning LLMs anyways or making some kind of test before people can contribute or some 3rd thing?

[manipulate @manipulate]

@750315 This is flat out incorrect. The exploit persisted. The account was compromised. I was unable to access my account. Stop talking nonsense when you don’t know.

[manipulate @manipulate]

@zachxbt @jadoodoo_ These ClickFix attacks are a new low.

[manipulate @manipulate]

@skylermzx One would have imagined but the horror stories people reached out to me about, like clicking links to get their accounts back from people pretending to have them and downloading "recovery tools" blew my mind!

[manipulate @manipulate]

I know right now Instagram is the hot topic but just some advice for anyone out there with valuable user names (or just in general)

A lot of people in my DM's are missing some context on attack surfaces and threat models. Let me give you some insight. Especially for you Discord users.

- Don't accept friend requests from people you don't know
- Don't respond to DM's from people you don't know
- DON'T CLICK ANY LINK ANYONE SENDS LOL
- Don't play weird games you've never heard of on Steam or the web (yes some games have been compromised and will open up access to your PC)
- Don't download and install anything anyone sends you

I thought this was common knowledge but I am hearing some horror stories.

[manipulate @manipulate]

Forget the Instagram exploit for a minute. Here’s the real story nobody is talking about.

AI is here to stay. Every day we trust it with a little more. It automates work, saves time, and in many cases does a pretty good job.

The Instagram incident is a glimpse of what’s coming.

Whether this specific issue was prompt injection, workflow abuse, or something else entirely almost doesn’t matter. What matters is that we’re putting AI in front of more and more systems and giving it access to more and more data.

This won’t be the last time we see something like this.

Today it was an Instagram account.

Tomorrow it could be your bank account, your smart home, your car, or something else entirely. Every week there are new MCP servers, integrations, agents, and tools being released. Many of them have access to data and permissions that people assume are private and secure.

The uncomfortable reality is that large language models are susceptible to manipulation. They can be tricked. They can be influenced. They can be exploited.

Prompt injection and prompt exploitation are not theoretical problems. They are real security challenges, and they’re not easily solved.

What happened today wasn’t an isolated event.

It was a preview.

[manipulate @manipulate]

Forget the Instagram exploit for a minute. Here’s the real story nobody is talking about.

AI is here to stay. Every day we trust it with a little more. It automates work, saves time, and in many cases does a pretty good job.

The Instagram incident is a glimpse of what’s coming.

Whether this specific issue was prompt injection, workflow abuse, or something else entirely almost doesn’t matter. What matters is that we’re putting AI in front of more and more systems and giving it access to more and more data.

This won’t be the last time we see something like this.

Today it was an Instagram account.

Tomorrow it could be your bank account, your smart home, your car, or something else entirely. Every week there are new MCP servers, integrations, agents, and tools being released. Many of them have access to data and permissions that people assume are private and secure.

The uncomfortable reality is that large language models are susceptible to manipulation. They can be tricked. They can be influenced. They can be exploited.

Prompt injection and prompt exploitation are not theoretical problems. They are real security challenges, and they’re not easily solved.

What happened today wasn’t an isolated event.

It was a preview.

[manipulate @manipulate]

Shoutout to @nikitabier. Today was a good X day and proof my account isn’t shadowbanned or dead. Long live the Boar!

[impulsive @weezerOSINT]

- You have not secured impacted accounts
- They are not getting a password reset notification, they're getting a notification that their account has been successfully stolen
- "we are now working to restore access to affected individuals" This is the same sentence as the last one but flipped. Contradictory.
- Why aren't we getting official statements instead of vague tweets

[manipulate @manipulate]

Hi Andy thanks for the reply. I appreciate your update. I think the best move would be to have something come from an official channel like @Meta or @instagram given the severity of the incident.

People are worried and are extremely apprehensive right now to click anything related to IG via email. The official announcement will go a long way. Just my take. Best of luck through the triage.

[manipulate @manipulate]

Hi Andy thanks for the reply. I appreciate your update. I think the best move would be to have something come from an official channel like @Meta or @instagram given the severity of the incident.

People are worried and are extremely apprehensive right now to click anything related to IG via email. The official announcement will go a long way. Just my take. Best of luck through the triage.

[manipulate @manipulate]

@andymstone @lorenzofb tagging for transparency.

[manipulate @manipulate]

Andy Stone in my replies. This is your source of truth. Here is the official update from lead communications at @Meta - respect to him for responding, even if I was slightly rude.

[Andy Stone @andymstone]

@manipulate Thank you for raising this. While we have already secured impacted accounts, we are now working to restore access to affected individuals. Some people may receive password reset notifications and some may be asked security questions when they try and log into their accounts.

[Andy Stone @andymstone]

@manipulate Thank you for raising this. While we have already secured impacted accounts, we are now working to restore access to affected individuals. Some people may receive password reset notifications and some may be asked security questions when they try and log into their accounts.