In the last 24-48hours a lot of people received a suspicious mail with a possibility to reset password on Instagram Platform.
Everyone is asking if that mail is legit and from Instagram itself or not.
In the following we’ll try to disecate the mail and make a conclusion in order to help other people.
Starting with the structure of the mail:
We can see it came from: security@mail.instagram.com which is a valid mail from them. Nothing unusual here, no hidden characters or something.
The reset button has the following:
https://instagram.com/accounts/password/reset/confirm/?uidb36=x&token=x:password_reset_email&v=150.0.0.0.0&s=password_reset_email
Which goes to the real page of Instagram, it’s a really valid flow of resetting the password. Nothing phishing here.
The next link which is hidden under “let us know” is also real, not phishing:
https://instagram.com/accounts/password/report/x/
But everyone’s curiosity is why these mails don’t appear in the recent mails sent by Instagram, when checking the app:
There might be a data breach or compromised accounts problem in this matter, but we don’t want to make assumptions or to point fingers in a certain direction, there is no evidence in this sense. From our point of view the reset password mails are valid but we don’t recommend reseting the password through that flow from the mail.
What CYBOV recommends:
- Resetting the password through the APP directly and not through some received mail
- Having 2FA
- Checking latest news about Instagram
More information from Malware Bytes:
Recent Comments