In a widespread campaign, hundreds of Instagram accounts were hacked, and personal information were modified.
After taking control of the account hackers, changes account name, Profile image, email address, phone numbers making it difficult for users to recover the account.
According to Mashable, users are getting logged out of their account and when they try to log in again, it shows their username longer exist.
When the user requested for a password reset, it was seen that the email address linked to their account have been changed to an email address associated with a Russian domain (.ru).
Many of the account’s profile pictures were changed to animated characters from Disney and Pixar movies.
Instagram users have been reporting similar attacks in the Reddit and social media’s since the beginning of this month.
However, it is still not clear how cybercriminal hacked the Instagram accounts, and there were some reports some of the hacked accounts had two-factor authentication enabled in their account.
Instagram has confirmed the issue and has published a security advisory regarding this issue “We are aware that some people are having difficulty accessing their Instagram accounts. As we investigate this issue, we wanted to share the below guidance to help keep your account secure:
- If you received an email from us notifying you of a change in your email address, and you did not initiate this change – please click the link marked ‘revert this change’ in the email, and then change your password.
- We advise you pick a strong password. Use a combination of at least six numbers, letters and punctuation marks (like ! and &). It should be different from other passwords you use elsewhere on the internet.
- You can also use the steps outlined on this page to restore your account. Please use a new, secure email address to restore your account.