Meta Verified Scam Ads on Facebook Steal User Account Details

Content creators and small businesses are facing a sophisticated new threat targeting their Facebook accounts through deceptive advertisements promising free Meta verification badges.

A new malvertising campaign is targeting Facebook users with malicious ads that promise to unlock Meta’s coveted blue verification tick through a seemingly legitimate browser extension.

These ads, accompanied by instructional videos, are designed to trick users into downloading malware that steals their account credentials and hijacks their Facebook Business accounts.

Security researchers have identified at least 37 malicious advertisements promoting this fake verification tool, all originating from the same Facebook account.

The campaign bears clear hallmarks of Vietnamese-speaking threat actors, with video narrations and code comments written in Vietnamese.

The malicious code includes instructions on how to customize variables such as the size and position of fake verification badges, demonstrating the attackers’ intent to create a convincing illusion of functionality.

The malicious ...