Common Facebook Scam Method

A Facebook-posted scam redirects users to sites impersonating Google reCAPTCHA and then to a browser notification permission dialog that instructs victims to "Click Allow"; accepting grants the malicious site persistent notification privileges and is used to push further malicious content or redirects. The author recommends closing the window, notifying the compromised friend, and reporting the profile to Facebook as the primary remediation steps.