Affected users report the email addresses linked to their Instagram accounts were changed to .ru domains.

Dark Reading Staff, Dark Reading

August 15, 2018

1 Min Read

A growing number of Instagram users have been hit in a hacking campaign leaving hundreds logged out of their accounts and struggling to reverse their profile content back to normal.

Users affected by the hack, first reported by Mashable, are logged out of their accounts. When they attempt to log back in, they learn their username, profile photos, password, and linked Facebook account have been changed. Email addresses linked to Instagram accounts have been switched to .ru domains, a sign the threat may originate from Russia or a Russian impersonator.

Other commonalities include deleted bios, changed handles, and a new profile photo of a Disney or Pixar film character. Nobody has confirmed the source of the hack or how the actor(s) is gaining access to these accounts.

While the attacker(s) have not deleted the photos in each profile, the fact that they edited contact info is making it harder for users to regain account access. Instagram has published guidance on how to restore affected accounts and revoke access to third-party apps.

Read more details here.

360-INsecurity-Sig-Blocks_Vplug2.png

Learn from the industry's most knowledgeable CISOs and IT security experts in a setting that is conducive to interaction and conversation. Early bird rate ends August 31. Click for more info

About the Author(s)

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights