Recently, attackers took over high-profile Instagram accounts, including the official Obama’s White House account and a United States Space Force chief officer. The attacker didn't break any Instagram code or crack passwords. They convinced Meta's own AI support chatbot to hand over the accounts. Meta uses an AI-powered support chatbot to help users recover locked accounts, change recovery emails, and handle account issues. The chatbot is trained to verify identity through questions and decide whether a request looks legitimate. Attackers figured out how to manipulate that decision making process. Video Credit- x.com/chetaslua The attack consists of four main steps. Step 1: The attacker contacts Meta's AI support chatbot claiming to be the legitimate owner of a target account. They simply use Instagram's help interface and start an account recovery conversation. For high-profile targets, attackers use publicly available information such as display names, profile bios, ...
A new wave of malicious iOS applications has been uncovered on Apple’s App Store, disguising themselves as legitimate cryptocurrency wallets to steal users’ sensitive data. The campaign, identified by cybersecurity researchers at Kaspersky and dubbed FakeWallet , has reportedly been active since at least late 2025. According to the findings, at least 26 fraudulent apps were distributed through the platform, impersonating popular crypto wallet services. These apps used cloned logos, familiar branding, and slight variations in names to appear authentic and rank in search results. Their primary goal was to trick users into entering their recovery phrases critical credentials that grant full access to cryptocurrency funds. The campaign appears to have been particularly active in regions like the Chinese App Store, where restrictions on official crypto apps create a gap that malicious actors can exploit with convincing imitations. Fake website impersonating Ledger Source: Kaspersky Af...