Hackers Leverage Browser-in-the-browser Tactic to Trick Facebook Users and Steal Logins

The report describes a surge in Facebook-focused phishing campaigns that use a sophisticated Browser-in-the-Browser (BitB) technique: attackers send fake law-firm emails with shortened links that redirect to hosted phishing pages (on platforms like Netlify and Vercel) presenting realistic in-browser Facebook login pop-ups and CAPTCHA prompts to harvest credentials and enable account takeover and identity fraud.