LLMHigh
Attackers Reportedly Deployed Simulated AI Support Chatbot to Trick Instagram Business Users into Adding Malicious 2FA Login
- Occurred
- Mar 12, 2025
- Published
- Mar 21, 2025
- Source
- AI Incident Database
Summary
A phishing campaign has reportedly been impersonating Meta support using a fake chatbot interface to hijack Instagram Business accounts. Victims received emails claiming ad violations and were directed to a fraudulent site mimicking Meta's support. There, a simulated chatbot instructed users to add the attacker’s Authenticator app as a secure login method, enabling account takeover. It remains unclear whether the chatbot used AI or was human-operated via a bot-like interface. See editor's note.
Developers
- Generative AI developers
Deployers
- Scammers impersonating Meta support
- Phishers
- Scammers
Harmed parties
- Meta users
- Instagram users
- Instagram Business users
Tags
- Financial fraud
- Social media fraud
- Impersonation fraud
- Phishing
- Social engineering
Classification
Category confidence: 70%
Severity confidence: 90%
Rationale: Phishing campaign uses simulated AI chatbot to trick users into account takeover, causing significant security risk.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8