Security News > 2023 > September > Requests via Facebook Messenger lead to hijacked business accounts

Hijackers of Facebook business accounts are relying on fake business inquiries and threats of page/account suspension to trick targets into downloading password-stealing malware.

Hijacked Facebook business accounts a great way to reach a broad audience with ads and more scams.

"Additionally, individuals who own Facebook business accounts are likely to have other highly valuable accounts on other platforms such as banking, e-commerce, ad platforms, and much more - all available to grab directly from their browser's cookies and password files," says Guardio Labs researcher Oleg Zaytsev.

In this specific campaing, the crooks are contacting business account owners via Facebook Messenger.

There is a thriving underground economy related to selling hijacked social media business accounts and it seems that Vietnam-based threat actors are among the most active participants.

"The threat actors hold an army of bots and fake Facebook accounts as well as a listing of millions of business accounts, pages, and managers - sending away over +100k phishing messages a week to Facebook users around the world," Zaytsev noted.

News URL

https://www.helpnetsecurity.com/2023/09/12/hijacked-facebook-business-accounts/