Hackers duped Meta AI support chatbot to steal celebrity Instagram accounts

Report describes attackers abusing Meta's AI-powered support assistant to trick the model into performing account modifications that enabled takeover and resale of valuable Instagram handles; the technique is framed as a 'confused deputy' issue with large language models. The attacks succeeded against accounts lacking multifactor authentication (MFA), while accounts with even SMS-based MFA resisted the exploit; recommended mitigations include out-of-band verification, rate limiting, action logging with anomaly detection, and deterministic gating of AI-driven account changes.