Phishing Attacks Targeted Facebook Users With Fake Verification Offer

Cybercriminals ran a phishing campaign (Nov 2025–Jun 2026) that used a hijacked Facebook Messenger chatbot (presented as “AI Strategic Partner”) and spoofed Facebook Business messages to lure Meta For Business users to fake verification pages; victims were induced to submit usernames, passwords, MFA codes, phone numbers, emails and photos of identity documents, enabling account takeover, fraudulent ad spend, and targeted follow-on attacks before Meta intervened.