Tech (non)support: Scammers pose as Meta in Facebook account grab ploy

Group-IB uncovered an ongoing phishing campaign (tracked Feb–Mar 2023 with traces since Dec 2020) in which attackers created or repurposed over 3,200 Facebook profiles and more than 220 phishing sites across 23 languages to impersonate Meta/Facebook technical support, steal user credentials and session cookies (enabling session hijacking and account takeover), and then leverage compromised accounts to amplify further phishing; the report details attack flow, scale, targets (public figures, businesses, sports teams), detection via Group-IB’s Digital Risk Protection, and recommends strong unique passwords, 2FA, URL verification, and use of official links.