Access to the accounts is being sold for up to $40,000.
Hackers are hijacking the Instagram accounts of companies and influencers with huge followings in a
new phishing campaign identified by Secureworks.
The cybersecurity company said it discovered the effort in October, finding hackers taking over prominent accounts and demanding a ransom.
The people behind the attack start by sending a message pretending to be Instagram, notifying Instagram users of a purported instance of copyright infringement. There is a link in the message that takes victims to a website controlled by the hackers. From there, the user is asked to enter their Instagram login information, giving the attackers full access to their accounts.
New phishing attack steals your Instagram backup codes to bypass 2FA
If you wanted total visibility over high-risk individuals, you’d build a mobile virtual network operator called Cape