Instagram users are being warned about a potential surge in phishing attacks following a recent wave of unexpected password reset emails. While Instagram has fixed the underlying security issue, experts say the incident has created ideal conditions for cybercriminals.
Last week, many users received multiple password reset emails from Instagram. The company later confirmed it had “fixed an issue that let an external party request password reset emails for some people.” However, the confusion caused by these emails makes users more vulnerable to follow-up attacks.
Experts at ESET Ireland caution that attackers often exploit such moments of uncertainty. “A wave of genuine password reset emails creates uncertainty, and that is exactly when phishing spikes,” said George Foley from ESET. Users may be more likely to click on malicious links or respond to fraudulent messages.
The National Cybersecurity Center also highlighted the risk, noting that users often struggle to identify real threats during such incidents. CEO Greg Oslan said, “Companies struggle to reach users, users struggle to recognize real threats, and too often no one knows what to do, where to go, or who to trust.”
To stay safe, users should ignore any password reset emails unless they personally requested them. Any suspicious messages claiming to be from Instagram should be verified through the official app or website. Two-factor authentication remains an important safeguard against unauthorized access.
The key advice: stay alert, verify requests directly with Instagram, and don’t click suspicious links. This precaution can prevent phishing attacks from turning into serious account compromises.
