Meta Phishers Abuse Business Account Manager Service

A sophisticated phishing campaign exploited Meta's legitimate business account services to send convincing, validation-passing emails that tricked business users into surrendering credentials, MFA codes, and identity documents, but Meta has since implemented technical controls to block this attack vector.