WARNING - Instagram hacking

Gothic Image said

Thelema said

Gothic Image said

How it works is this: 

• The hacker goes to your account and clicks "forgot password";
• Meta sends your 'phone a web link to reset your password;
• You screenshot the link to the hacker;
• The hacker copies the link into their browser and can then change your password.

That's why you don't need to click on anything for the hack to work.  Clever, and like a lot of clever things, very simple.

The only way to defeat this is never respond to a request to screenshot anything unless you are absolutely 100% sure who you are dealing with.

Thankyou, I was fretting over how they were doing it so i do feel more at ease now as Im sure others reading this are too 

It took a while to figure out - the key is persuading the victim to believe why they are receiving a (genuine) link from Instagram.

Plenty of tech sites around c/w tutorials telling you how to hack IG. The "Instagram Forgot Password Feature" method you describe is probably the simplest. But there are plenty of other methods too...

• https://peakarena.com/hack-instagram-account-password/

Paul Archer Photography said

Anyone received a follow this person?  https://instagram.com/grace_aldrich_hanson_?igshid=YmMyMTA2M2Y= 

I followed back, and she has been DMing me several times, volunteering lots of personal info regarding her age, location, relationship status etc, and requesting the same from me. I have ignored her for now. 

What makes you think that "she"'s a she?  It's probably some bloke in Nigeria or Russia.

Gothic Image said

Paul Archer Photography said

Anyone received a follow this person?  https://instagram.com/grace_aldrich_hanson_?igshid=YmMyMTA2M2Y= 

I followed back, and she has been DMing me several times, volunteering lots of personal info regarding her age, location, relationship status etc, and requesting the same from me. I have ignored her for now. 

What makes you think that "she"'s a she?  It's probably some bloke in Nigeria or Russia.

LOL Ouch! but yeah sadly true 

Gothic Image said

Paul Archer Photography said

Anyone received a follow this person?  https://instagram.com/grace_aldrich_hanson_?igshid=YmMyMTA2M2Y= 

I followed back, and she has been DMing me several times, volunteering lots of personal info regarding her age, location, relationship status etc, and requesting the same from me. I have ignored her for now. 

What makes you think that "she"'s a she?  It's probably some bloke in Nigeria or Russia.

Well, the pictures on the profile are of a woman. But yes, it’s quite possible that they could be a geezer. 

Paul Archer Photography said

Anyone received a follow this person?  https://instagram.com/grace_aldrich_hanson_?igshid=YmMyMTA2M2Y= 

I followed back, and she has been DMing me several times, volunteering lots of personal info regarding her age, location, relationship status etc, and requesting the same from me. I have ignored her for now. 

Dear Lord!

The age old rule of "if it looks too good to be true, it probably is", unless the poster "appears" to be a very pretty lady.

A few enticing pictures, following loads more than are following "her" and no real explanation of why "she" is on IG or hoping to achieve

Gothic Image said

BRT Photography said

If anyone hasn't activated 2FA on their accounts, I would definitely recommend doing so, lets you get notified if anyone is trying to access your account with the right password. Can't get into your account if they don't have your phone :D

2FA won't help in this case, nor will changing your passwords.

How it works is this: 

• The hacker goes to your account and clicks "forgot password";
• Meta sends your 'phone a web link to reset your password;
• You screenshot the link to the hacker;
• The hacker copies the link into their browser and can then change your password.

That's why you don't need to click on anything for the hack to work.  Clever, and like a lot of clever things, very simple.

The only way to defeat this is never respond to a request to screenshot anything unless you are absolutely 100% sure who you are dealing with.

Many thanks Gothic Image.

I can now see how they hacked my account.

I thought I was messaging with a fellow photographer. They were very convincing.

Let's hope other people read this and don't fall for the same trick.

Stay safe

Paul

one_tc said

I thought IG sent you an email saying your password had changed, which then allows you to reset it if you say it wasn't you that changed it.

IG did send me a message saying the password had changed. But by then I was locked out of my account.

I've informed Instagram of the hack. It remains to be seen if IG do anything and return my account.

Paul Webb Photography I know this may be a daft question but have you tried a password reset request? They might not have changed the email/phone number yet.

I received the "screen shot of the reset link" hack attempt as well.

I work in databases \ data etc - so I knew they wanted me to send the one time password reset code to them.

Had some fun pretending I had been taken in, and kept clicking the link (this invalidates it) and saying I'd have to "ask my grandson".

Saying "I think its an Apple phone, yeah, that one that has Android on it?"

"I don't know how to take a screenshot" - I'll send you the bit at the end (and purposefully sending the wrong code a few times :D)

This hacker was getting more and more p'ed off :D

They finally worked out I was messing with them when I sent them back www.instagram\reset\F***YOUHACKER\

EDIT : Oh yeah. After I rumbled the hacker he then tried me to get to invest in crypto! Like you would give money to come who has just tried to hack you :'D

Edited by Craig Hall

Gerry99111 said

Paul Archer Photography said

Anyone received a follow this person?  https://instagram.com/grace_aldrich_hanson_?igshid=YmMyMTA2M2Y= 

I followed back, and she has been DMing me several times, volunteering lots of personal info regarding her age, location, relationship status etc, and requesting the same from me. I have ignored her for now. 

Dear Lord!

The age old rule of "if it looks too good to be true, it probably is", unless the poster "appears" to be a very pretty lady.

A few enticing pictures, following loads more than are following "her" and no real explanation of why "she" is on IG or hoping to achieve

Oh here we go!

DEAR LORD! I was just trying to bring my experience to the attention of others in a related post, and I get ridiculed for it. Some people just can’t help themselves can they?  I don’t know why I bother.

Paul Archer Photography said

Gerry99111 said

Paul Archer Photography said

Anyone received a follow this person?  https://instagram.com/grace_aldrich_hanson_?igshid=YmMyMTA2M2Y= 

I followed back, and she has been DMing me several times, volunteering lots of personal info regarding her age, location, relationship status etc, and requesting the same from me. I have ignored her for now. 

Dear Lord!

The age old rule of "if it looks too good to be true, it probably is", unless the poster "appears" to be a very pretty lady.

A few enticing pictures, following loads more than are following "her" and no real explanation of why "she" is on IG or hoping to achieve

Oh here we go!

DEAR LORD! I was just trying to bring my experience to the attention of others in a related post, and I get ridiculed for it. Some people just can’t help themselves can they?  I don’t know why I bother.

You followed her back, then when the digging started, have ignored her for now LoL.

I have seen it happen on here with fake model accounts and people choosing not to see, even when the account gets removed what is very strange behaviour

Never mind

kennymcrae69 said

Paul Webb Photography I know this may be a daft question but have you tried a password reset request? They might not have changed the email/phone number yet.

Many thanks, but I've tried everything. I'm completely locked out of the account and the hacker has changed the name of the account too.

I've reported the hack to Instagram. Just hope they restore my account to me.

Keep safe.

My hacker has sold on my page to someone else after I wouldn't speak to him and blocked him  ( he phoned me from Russia - the hacker was a chinese guy in London and my account is now run by someone in Turkey who changed his name after many people reported the stole page - so I think he is still up  .)

Paul Webb Photography good luck on getting it back.

People should set up 2 factor authentication for their important web accounts including Outlook, Google, PayPal, Amazon, Facebook/Instagram, plus secure your email using a authenticator app such as Google Authenticator or Microsoft Authenticator.

If you don't know about 2 factor authentication, check out this video.