Instagram app on an Android phone.
Credit: Reuters File Photo
With over three billion monthly active users, Instagram is one of the most popular social media apps globally on Android, iOS and Windows platforms. This also attracts cyber rogues to target naive users and attempt to breach the security of Instagram.
Last weekend, several users received emails from Instagram to reset their Instagram account passwords immediately. Rumours spread that the Meta-owned entity has suffered a data breach, and reportedly, 1.75 crore accounts were compromised. That is why the company is sending warning messages to those affected.
However, Instagram refuted the speculations of data leakage, but noted that an anomaly in their system to allow external third-party vendor to send a reset password alert. Though the message was from Instagram, there was no need to reset the credentials, and they expressed regret for the confusion.
"We fixed an issue that let an external party request password reset emails for some people. There was no breach of our systems, and your Instagram accounts are secure. You can ignore those emails — sorry for any confusion," said Instagram on X platform.
That said, users are advised to be wary of such password reset alerts via email. Threat actors come up with ingenious ways to hoodwink potential victims. They cleverly use the company's official logo and even type fonts to make its proffessional looking mails, but the link offered to reset the password of an online account is compromised.
If you in doubt, always go directly to the official online account (also ensure the URL has 'https') and carry our password reset procedure and enable two-factor authentication or Passkeys.
Here's how to safeguard yourself from phishing attempts:
1) If you receive an email or message from a person with a familiar name or social media app, or even a government agency, read it carefully. Cyber crooks use fear and tell you to click on a URL link or a PDF to get more information. Do not press any link or download any file.
The government, tech firm or banks do not ask citizens to share their personal or financial details through messenger apps
2) Never install APK files or any apps from third-party app stores or links marketed on social media platforms. Always download apps from Google Play or Apple App Store, or Microsoft Windows Store
3) Never share online account details such as Gmail IDs, bank customer IDs and passwords on messenger apps or on emails with anybody or type details on an online form on a website published by an unknown company
4) Always update your smartphones and computers to the latest version to protect yourself from new emerging cyber threats
5) It is a good practice to install an anti-virus application from a well-known publisher on your device. Once installed, ensure to turn on the safe browsing feature
If you fall victim to online fraud, immediately call toll-free 1930. It is run by the Indian Cyber Crime Coordination Centre, and once you share the bank transaction details, they will be able to trace and freeze the mule bank accounts. Ensure you call them within one hour, as there will be a higher chance of blocking the cyber criminals from withdrawing the ill-got money.
Get the latest news on new launches, gadget reviews, apps, cybersecurity, and more on personal technology only on DH Tech.