Forbes contributors publish independent expert analyses and insights. Davey Winder is a veteran cybersecurity writer, hacker and analyst. This surprise Instagram message could signal an attack attempt ...

Your inbox chimes. An email from Instagram appears, bearing all the official hallmarks of authenticity—the verified domain, the proper formatting, the security@mail.instagram.com sender address.