New login to Instagram from GooglePlusBot on Linux

[Ditendra09]

Hello, I received this email today. It says "We noticed a login from a device you don't usually use. Linux · GooglePlusBot · Unknown location".

I have enabled 2FA for both my Facebook and Instagram, also have SMS authenticator enabled.

Should I worry about it? I wanted to reach "Instagram" support, but seems like they have grown up another big corporation that doesn't have any humans to contact and in fact, I couldn't even find any way to contact them, so I'm posting here.

I also googled this problem and seems like users from Russia were also getting this problem, but their location was California, Mountain View and I'm not from Russia.

Anyone having this problem besides me?

P.S. Also, I see that this forum uses my real name and I'm not comfortable with that. Can anyone from mods/admins help me to change my nickname?

 

[B. Diddy]

Are you certain the email was legit? What's the exact email address that's sending you that email? This could easily be a phishing attack.
@Bla1ze, can you help with changing the username?

 

[Bla1ze]

@Bla1ze, can you help with changing the username?

Sure can. Jaba, if you want your username changed email accounts @ mobilenations.com and I can sort it out for you.

 

[Ditendra09]

Are you certain the email was legit? What's the exact email address that's sending you that email? This could easily be a phishing attack.
@Bla1ze, can you help with changing the username?

Yes, I think it was legit from Instagram. Sender email was "ecurity@mail.instagram.com".

This is the thread I found about it, but unlike them it doesn't say about location that it was from Mountain View, CA, mine says unknown location and also, like I said, I'm not from Russia and in that link, seems like only Russians were having this weird problem.

Also, I didn't notice any change or anything in my account and obviously I was able to login in my account and as soon as I logged in, changed my password.

I don't know what to think, maybe it's some kind of glitch on Instagram/Facebook? Few months ago I had a similar problem, but on Google. I got some new phone login in my Google devices and after some research and forum help, we found out some emulator program on PC was making this glitch. I'm thinking probably this is also something like that, because my accounts are very protected, I'm cautious person and if website offers 2FA in settings, I always enable it.

 

[Ditendra09]

Sure can. Jaba, if you want your username changed email accounts @ mobilenations.com and I can sort it out for you.

Thank you, I just sent an email to accounts@mobilenations.com

 

[B. Diddy]

Is this still an option? https://www.entrepreneur.com/article/340569

 

[mustang7757]

Yes, I think it was legit from Instagram. Sender email was "ecurity@mail.instagram.com".

This is the thread I found about it, but unlike them it doesn't say about location that it was from Mountain View, CA, mine says unknown location and also, like I said, I'm not from Russia and in that link, seems like only Russians were having this weird problem.

Also, I didn't notice any change or anything in my account and obviously I was able to login in my account and as soon as I logged in, changed my password.

I don't know what to think, maybe it's some kind of glitch on Instagram/Facebook? Few months ago I had a similar problem, but on Google. I got some new phone login in my Google devices and after some research and forum help, we found out some emulator program on PC was making this glitch. I'm thinking probably this is also something like that, because my accounts are very protected, I'm cautious person and if website offers 2FA in settings, I always enable it.

I would change your passwords just to be on safe side , is that the actual email or was it security instead of Ecurity ?

 

[Ditendra09]

I would change your passwords just to be on safe side , is that the actual email or was it security instead of Ecurity ?

No, it's actual address, I just copy pasted from my Gmail.

Yes, I already changed my password on Instagram straight away after getting this email.

 

[mustang7757]

No, it's actual address, I just copy pasted from my Gmail.

Yes, I already changed my password on Instagram straight away after getting this email.

Ok good , that email brings up a red flag as it spelled so I think u should be ok since changing the password.

 

[B. Diddy]

No, it's actual address, I just copy pasted from my Gmail.

So just to be clear -- the sender address was "ecurity@mail.instagram.com" or "security@mail.instagram.com"?

Did you take a look at the last link I shared?

 

[Ditendra09]

So just to be clear -- the sender address was "ecurity@mail.instagram.com" or "security@mail.instagram.com"?

Did you take a look at the last link I shared?

Yes, I just did this. I checked in my Instagram settings, security, emails from Instagram & that email is there, so yeah, it was legitimate email from Instagram.

 

[B. Diddy]

Ok, gotcha. Do you ever log into Instagram on a device other than a phone or a computer, like maybe a car system or a smart display?

 

[Ditendra09]

Ok, gotcha. Do you ever log into Instagram on a device other than a phone or a computer, like maybe a car system or a smart display?

No, I don't. I have only desktop computer, phone and work computer. None of them have Linux system. To be honest, I rarely (almost never) use Instagram.

 

[B. Diddy]

After reviewing the threads I could find on the web that you most likely also reviewed, I would also agree that this was probably an unsuccessful attempt by someone else to log into your Instagram account. Since you already changed your password and use 2-factor, I think you're fine. The main things I would do at this point: (1) if you used that password for any other account, change it there as well, and (2) if you can use an authenticator app as your 2nd factor, then use it (rather than SMS, which can be intercepted).

 

[Ditendra09]

After reviewing the threads I could find on the web that you most likely also reviewed, I would also agree that this was probably an unsuccessful attempt by someone else to log into your Instagram account. Since you already changed your password and use 2-factor, I think you're fine. The main things I would do at this point: (1) if you used that password for any other account, change it there as well, and (2) if you can use an authenticator app as your 2nd factor, then use it (rather than SMS, which can be intercepted).

So, leave only authenticator and disable SMS authenticator?

Yes, I'm ditching my old password and using random generated passwords that are safely saved in my Bitwarden account.

Okay, I removed everywhere SMS authentication and left only authenticator app authenticator.

 

[B. Diddy]

Yeah, if you want to be as safe as possible, it's recommended to avoid SMS authentication. Unfortunately, there are still some authentication protocols that don't give the option to use an authenticator app.:-\