Meta Verification Phishing: How a Blue Badge Lure Can Lead to Facebook Page Takeover

Hornetsecurity’s Threat Intelligence Lab analyzed a Meta-themed phishing campaign targeting French-speaking Facebook Page owners by luring victims with fake verification badges. The campaign abuses Google AppSheet and attacker-controlled redirectors to present a Multi-stage verification workflow that collects Page information, personal details, Facebook credentials, MFA codes, and identity documents; it stages data in encrypted browser localStorage before exfiltration, is multilingual and reusable, and includes indicators of compromise and defensive recommendations for detection and response.