Beware the Meta-Mimic: Facebook Phishing Scams on the Rise!
Managing Facebook advertising? Beware of phishing emails from the real @facebookmail.com domain, as attackers impersonate Facebook Business pages. With over 40,000 emails sent globally, these cunning invites aim to steal credentials. Always verify invites through official channels and enable multi-factor authentication to stay secure. Your inbox might just be the new Wild West!

Hot Take:
Looks like Facebook’s Business Suite is the new playground for cyber trick-or-treaters! Don’t be surprised if your inbox gets an invitation from the cyber boogeyman himself. But remember, if it looks too Meta to be true, it probably is!
Key Points:
- Check Point discovered a phishing campaign using Facebook’s own Business Suite against small and medium-sized businesses.
- Phishing emails came from the real @facebookmail.com domain, making them harder to detect.
- About 40,000 phishing emails were sent to 5,000 customers globally.
- Invitations carried credential-harvesting links, targeting industries like automotive, education, and finance.
- Victims are advised to enable multi-factor authentication and verify suspicious invites through official Meta channels.
Already a member? Log in here
