- Cybercriminals tricked Meta’s AI customer support agent into forwarding password reset codes
- Stolen short‑handle accounts, valued at over $1M combined, were listed for sale across Telegram
- Attack highlights risk of delegating sensitive tasks to AI systems
Cybercriminals successfully pulled off a social engineering attack against Meta’s customer support, tricking the representative into initiating a password reset sequence without asking for any identity verification.