The deepfake is not the interesting part — Meta's support bot added the attacker's email without asking a human
2026-08-17Security
Attackers took over Instagram accounts using photos from the target's own public profile, a public deepfake generator and a VPN. Better liveness detection would not have stopped it, because the bot could be talked into the rest.