My other half discovered that some dodgy person/company had managed to send instagram messages to all of her followers from her account. She changed her password immediately, but what could have happened here? Is it the case that a “hacker” had access to her full instagram account, or would they have used some tool that allows posting of messages via some kind of proxy without requiring access to her actual account? There was no record of other logged in devices on the security page of her account.
None of the messages that were sent to people have appeared in the chat history for that person. Except there are two new chats in her messages to people that she doesn’t know, containing only the rogue message.
Interestingly, her entire chat history with me has been wiped.
google “session stealer”. your partner probably clicked on the malicious link and provided hackers full access to the account. not sure if signing out of all devices helps, but do it anyway.