Russian hijackers are stealing Instagram accounts, but no one knows exactly how or why. The first thing to do is change your password.
Thousands of Instagram users have reported that their accounts have been hijacked over the past few weeks. The attacks involve users being locked out of their accounts with their email addresses changed to .ru domains, Mashable reports.
The best thing to do right now to is to change your Instagram password to something strong and unusual and — this is very important — to make sure that password is not used for any other account.
In any case, it’s a very good idea to have two-factor authentication enabled on your Instagram account, and to keep a close eye out for any email message saying that 2FA has been disabled — and to try to lock down the account right away if you get that message.