You’ve been invited to join a Meta for Business scam! · Blog · Sublime Security

This report describes an in-the-wild Meta credential-phishing campaign where attackers use legitimate Meta for Business invitation emails or lookalike landing pages to lure targets to malicious domains (e.g., profileportal.agency-partner-register.com), present fake Meta registration and password/2FA prompts that harvest credentials and codes, and employ variations such as hidden non-English characters and fake verified-badge hooks; Sublime details the attack flow, detection signals, and its AI-based prevention.