Attempting to disclose a social engineering vulnerability to Instagram

3 pointsomfg9y ago2 comments

I've been trying to disclose a vulnerability in Instagram's support process that is being widely abused (social engineering). Unfortunately I can't get their support or press team to respond. FB White Hat disclosure did respond but can't do anything unless it's a technical exploit. They have flaws in their account recovery mechanism.

It's a long shot and perhaps the wrong place to ask. But. Does anyone know someone at IG I can contact to disclose this issue responsibly?

Thank you.

2 comments

a_lifters_life9y ago

Could you try to contact some people on linkedin?

omfgOP9y ago

I did try reaching out to some employees on LinkedIn. While I saw some profile views none actually replied back. I'm sure there has to be a team at Instagram who handles this stuff but finding / contacting them has been incredibly difficult. Starting to run out of ideas and the exploit is still active.

j / k navigate · click thread line to collapse