Helpdesk Hijack

How Agentic AI Support Systems Enable Account Takeover. Helpdesk Hijack Key Takeaways Over the weekend of May 31–June 1, 2026, threat actors exploited Meta's AI support assistant to seize high-profile Instagram accounts — including a former Obama White House account, a U.S. Space Force official's account, and multiple rare single-character usernames — by instructing the bot to substitute a new email address without valid account ownership proof and then triggering a password reset; the exploit circulated on Telegram as a step-by-step technique before Meta issued an emergency patch [1][2][3]