Meta Business Alerts Abused for Phishing Campaigns

Hackers are abusing Meta Business Manager notifications and real Meta domains to send authentic-looking emails that redirect via trusted services (e.g., Google Forms) to spoofed Facebook Help pages; the pages harvest credentials, business page details, and 2FA codes so attackers can hijack Business Manager and ad accounts to run fraud or pivot into connected systems.