geej

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: Meta's AI feature let attackers hijack Instagram accounts for days with nothing but a username. It was being A/B tested on a slice of users, and if you were in the test, you couldn't turn it off. Among the casualties: the official Obama White House account.

The method: get on a VPN near the target's region, ask the Meta AI support agent to send a verification code to any email you control, relay that code back to the agent, and it hands over a password reset link. Without ID or human review. From there, the account is yours.

The flaw lived in the AI's logic layer, which acted on recovery requests with no real identity checks. One researcher compared it to the Roblox AI assistant exploit from days earlier, where you needed a target's billing info. Instagram was easier: the username and a regional VPN were enough and victims reported sessions revoked and passwords changed with no email, text, or push alert at all.

By the time it went public, the method was common knowledge in blackhat Telegram circles and had been used to allegedly hijack 100+ high-value accounts.

Accounts hit:
- obamawhitehouse (the archived official Obama White House account, ~2.4M followers. Hackers posted an AI-generated image captioned "The White House is under Shiites' control," plus cryptic anti-Trump and pro-Iranian Stories. Meta confirmed the hack and scrubbed it.
- Premium short handles like hey and jowo, worth over $1M combined, stolen and flipped on Telegram.
- albert (owned by Albert Renshaw), whose owner publicly reported being locked out and unable to reach Meta support.

Meta has since patched it. There was no public acknowledgment.

[geej @notgeej]

Been going back and forth with @Bugcrowd analyst to reproduce this report. 😆

Already provided a copy/paste, step-by-step PoC.

[geej @notgeej]

I'm up all night to get lucky

[geej @notgeej]

@actuallyclover public

[geej @notgeej]

Another internal duplicate on this program. 😆

[geej @notgeej]

Sad, internal duplicate.

[geej @notgeej]

Sad, internal duplicate.

[geej @notgeej]

@actuallyclover Congrats!

[Yassine Aboukir 🐐 @Yassineaboukir]

If you’re a good bug bounty researcher, AI amplifies your skills. If you lack the foundations, you just become a victim of slop, and so do the programs you hack.

Applies to all other fields.

[shubs @infosec_au]

https://t.co/rLl6ZzmuvY

[geej @notgeej]

Taipei 101

[Orange Tsai 🍊 @orange_8361]

That's my chain — a full chain w/ logic bugs only! No memory corruption, no AI, and of course no collisions at all 😉

[bugcrowd @Bugcrowd]

Friendly reminder: validate the bugs that AI is finding for you *before* submitting them. 😅

[geej @notgeej]

Yay, I was awarded a $1,000 bounty on @Hacker0x01! https://t.co/e4csvXLw14 #TogetherWeHitHarder

Thanks Claude!

[geej @notgeej]

Taking 5g creatine daily this year was worthwhile.

[geej @notgeej]

"key":"modifiedvalue123" = 400 Bad Request
"key":null = 200 OK

#bugbountytips

[geej @notgeej]

Shanghai

[geej @notgeej]

Pentesterlab pro giveaway

https://t.co/rjyDTvVFpJ

[geej @notgeej]

@PentesterLab pro giveaway

https://t.co/rjyDTvVFpJ