Phishing Scams Exploit Browser-in-the-Browser Attacks to Steal Facebook Passwords

Cybercriminals are using a browser-in-the-browser (BitB) phishing technique to present highly convincing fake Facebook login pop-ups—often preceded by spoofed emails and fake CAPTCHA screens—to harvest personal information and credentials; users are advised to enable two-factor authentication and avoid logging in via emailed links.