A team at vpnMentor found the massive Instagram click farm operation thanks to a completely unsecured Elasticsearch database it was using, connected to the public-facing internet.
Source: cyware.com