Researchers warn about the phishing scam specifically targeting Instagram users through direct messages on the app. Turkish-speaking cybercriminals are sending seemingly legitimate messages to Instagram users from the social media company, with the aim of stealing their Instagram and email credentials.
Researchers confirm that the campaign has been targeting hundreds of startup business owners, celebrities, and other entities having sizeable followings on Instagram. This specific attack first came on the radar after a police officer with over 16,000 followers on Instagram was targeted.
While earlier phishing messages have been sent through email using Instagram as a lure, the attackers in this campaign send the phishing messages on Instagram’s platform itself. They pretend to be the Instagram Help Center and claim that a copyright violation complaint has got filed against the account owner – and that the account is now at high risk of being deleted.