Fake Meta Ads Manager in App Store and TestFlight used to phish Meta ad accounts · Blog · Sublime Security

Sublime’s Attack Spotlight details an in-the-wild email campaign impersonating Meta to trick recipients into installing a fake Meta Ads Manager iOS app via TestFlight (and later a variant listed in the App Store) for credential phishing and possible malware delivery; the report outlines attack flow, detection signals (brand impersonation, freemail senders, homoglyphs, dead-footers), and notes the malicious app was reported and removed.