Devious phishing campaign hijacks a genuine Meta business feature to send scam emails — as they really do come from Meta's own address

Devious phishing campaign hijacks a genuine Meta business feature to send scam emails — as they really do come from Meta's own address

Huntress uncovers phishing campaign abusing Meta’s business account email infrastructure and impersonating the Meta Agency Partner ProgramVictims were tricked into handing over credentials, which attackers exfiltrated to Telegram for account takeover, scam ads, and targeted phishingMeta has since added guardrails that killed the campaign; Huntress published IoCs to help organizations detect related activityHackers are abusing one, and impersonat…