Meta Phishers Abuse Business Account Manager Service | Huntress

A phishing campaign exploited Meta's business partner messaging to send seemingly legitimate partner requests that redirected recipients to attacker-controlled landing pages (Google Sites, Netlify, and other domains). The pages harvested Facebook/Instagram credentials, MFA codes, phone numbers and identity documents and exfiltrated submissions to a Telegram bot channel; researchers observed older (May) and newer (June, chatbot-driven) variants, captured IoCs (domains and URLs), and noted Meta has implemented mitigations that reduced the abuse.