… The hackers reported their exploit failing against any accounts that had enabled multifactor authentication MFA , including the “least robust form of MFA that Instagram offers” in the form of one-time codes sent through SMS, according to KrebsOnSecurity . …
… The security lapse follows Meta’s massive corporate layoffs and reassignments to AI initiatives, which reportedly shrank Instagram’s Trust and Safety division by 60%. …
… After changing the email address, the attacker could initiate a password reset process and receive the required security code for gaining access to the account. Some online reports claim that the @e and @f one-letter accounts on Instagram were obtained through an active exploit. …
… Meta began implementing age-verification tech in 2024 for Instagram users in the United States, Australia, Canada, and the United Kingdom. Now, the mechanism will be extended to Instagram accounts in Brazil and 27 European Union countries. …
