Instagram users are reporting the same bizarre hack

guest · Aug 29, 2020

Instagram ‘Help Center’ Phishing Scam Pilfers Credentials
August 28, 2020
https://threatpost.com/instagram-help-center-phishing-scam-pilfers-credentials/158777/

Turkish-speaking cybercriminals are sending Instagram users seemingly legitimate messages from the social media company, with the aim of stealing their Instagram and email credentials.

Researchers said that the campaign has been targeting hundreds of celebrities, startup business owners, and other entities with sizeable followings on Instagram. This specific attack first came on researchers’ radar after a police officer with more than 16,000 followers on Instagram was targeted, they said.

“The message also provides a link which masquerades as a form for sending an appeal but which is actually a phishing link,” said researchers with Trend Micro in a Friday analysis.
“Opening the link leads to a page where the user will be requested to provide their username. As of writing, the form has no data validation, meaning that any input — even a non-existent account or no input at all — would be accepted.”
Click to expand...

“Some victims can be famous enough to be blackmailed with information found on Google,” Karasek told Threatpost. “Most of the victims also use the same password for all social networks, so they get their whole online identity stolen, exploited and abused.”
Researchers advised Instagram users to be cautious of seemingly legitimate sites that request account credentials for another site.
Click to expand...

Trend Micro: New Bait Used in Instagram Profile Hacking Scheme

Last year, we observed attacks launched to steal high-profile Instagram accounts. Now, attacks of a similar nature are on the rise again, this time using new lures to achieve the same goal.
Click to expand...

guest · Jul 18, 2021

Instagram implements ‘Security Checkup’ to help users recover compromised accounts
July 18, 2021
https://securityaffairs.co/wordpress/120260/security/instagram-security-checkup.html

Good news for the owners of Instagram accounts that may have been compromised, the company launched a new feature named ‘Security Checkup‘ feature that aims to keep accounts safe and help users to recover them.

“Today, we’re launching Security Checkup, a new feature to help people keep their Instagram accounts secure. Security Checkup will guide people, whose accounts may have been hacked, through the steps needed to secure them. This includes checking login activity, reviewing profile information, confirming the accounts that share login information and updating account recovery contact information such as phone number or email.” states the company.
During the procedure to re-gain access to accounts, users will have to perform a series of actions, such as reviewing profile information, checking recent login activity, and updating contact details (i.e. email address, phone number).

Instagram also recommends users enable two-factor authentication to protect their accounts.
Click to expand...

guest · Sep 3, 2022

Thousands lured with blue badges in Instagram phishing attack
By Bill Toulas @billtoulas - September 1, 2022

A new Instagram phishing campaign is underway, attempting to scam users of the popular social media platform by luring them with a blue-badge offer.

Blue badges are highly coveted as Instagram provides them to accounts it verified to be authentic, representing a public figure, celebrity, or brand.
The spear emails in the recently observed phishing campaign inform recipients that they Instagram reviewed their accounts and deemed them eligible for a blue badge.
Click to expand...

Users falling for the scam are urged to fill out a form and claim their verification badge in the next 48 hours.
Campaign details
The new campaign was spotted by threat analysts at Vade, an AI-based email security service, who reported that the first messages to targets were sent out on July 22.

During the deployment, email distribution volumes spiked twice, once on July 28 and again on August 9, 2022, with more than 1,000 phishing messages per day.
The users are warned that if they ignore the message, the form will be permanently deleted in 48 hours, creating a sense of urgency and the illusion of a limited opportunity.
Click to expand...

How Instagram badges work
To understand how you can protect yourself from these scams, it is essential to know how Instagram’s verification program actually works.

First, the social media platform will never contact you offering a blue badge. Users can only get it by applying themselves.
Secondly, applying for verification is only possible through the official platform, never by visiting a separate domain.
Thirdly, Instagram blue badges are reserved for notable public figures, celebrities, and brands, so regular accounts aren’t eligible.
Click to expand...

Log in or Sign up

Instagram users are reporting the same bizarre hack

guest Guest

guest Guest

guest Guest

Log in or Sign up

Instagram users are reporting the same bizarre hack

guest Guest

guest Guest

guest Guest

Useful Searches