2013-07-30 UTC
# 
tantek I'm assuming they've figured out a mobile-Safari-specific XSS hack that allows them to compromise a user who is already cookied into instagram.com on their browser, changing their bio (to add the link to spread), and email address (users have reported getting locked out when they hit the reset password link).