#NoFilter: Exposing the Tactics of Instagram Account Hackers

This report analyzes an Instagram-focused phishing campaign that targets influencers by impersonating Instagram support or offering verified badges, directing victims to phishing pages that collect Instagram credentials and associated email passwords; attackers then change passwords, exfiltrate content, and extort victims for payment (bitcoin, vouchers), sometimes selling or reusing high‑follower accounts. The write-up describes the phishing flow, attacker roles, abuse cases, defensive recommendations (2FA, Security Checkup), and provides example malicious URLs as indicators.