SocialMetrics Pro fake Meta Verified malvertising campaign
Campaign
Summary
Hide ▲
Show ▼
A malvertising campaign is using malicious ads and fake websites to distribute the SocialMetrics Pro browser extension, which is designed to steal Facebook session cookies and credentials. The operation targets Facebook, Instagram, and Meta Business/Ads accounts, with at least 37 malicious ads observed. It matters because the stolen access can be used for account hijacking and resale on underground forums.
Related Happenings
AccountDumpling Google AppSheet Facebook phishing campaign
Campaign
First: 01.05.2026 21:09
Last: 01.05.2026 21:09
Sources 1
About this happening:
A **Vietnamese-linked** operation dubbed **AccountDumpling** is using **Google AppSheet** as a phishing relay to steal **Facebook** credentials, enabling account takeover at scale...
AccountDumpling Google AppSheet Facebook phishing campaign
CampaignAbout this happening: A **Vietnamese-linked** operation dubbed **AccountDumpling** is using **Google AppSheet** as a phishing relay to steal **Facebook** credentials, enabling account takeover at scale...
Rising social-media scam losses among U.S. consumers in 2025
Target Trend
First: 27.04.2026 19:27
Last: 27.04.2026 19:27
Sources 1
About this happening:
**Social media scams** drove a sharp rise in consumer losses in **2025**, with reported losses reaching **$2.1 billion** and nearly **30%** of scam-loss reports starting on these...
Rising social-media scam losses among U.S. consumers in 2025
Target TrendAbout this happening: **Social media scams** drove a sharp rise in consumer losses in **2025**, with reported losses reaching **$2.1 billion** and nearly **30%** of scam-loss reports starting on these...
Meta rolls out anti-scam tools for WhatsApp, Facebook, and Messenger
Security Tool/Service
First: 12.03.2026 15:17
Last: 12.03.2026 15:17
Sources 1
About this happening:
Meta introduced **new anti-scam protections** across **WhatsApp**, **Facebook**, and **Messenger**, adding warnings and detection features to reduce scam abuse against users. The...
Meta rolls out anti-scam tools for WhatsApp, Facebook, and Messenger
Security Tool/ServiceAbout this happening: Meta introduced **new anti-scam protections** across **WhatsApp**, **Facebook**, and **Messenger**, adding warnings and detection features to reduce scam abuse against users. The...
Meta rolls out anti-scam protections and AI scam detection across WhatsApp, Facebook, and Messenger
Security Tool/Service
First: 11.03.2026 15:29
Last: 11.03.2026 15:29
Sources 1
About this happening:
Meta is rolling out **anti-scam protections** across **WhatsApp, Facebook, and Messenger**, using warnings and AI detection to block scams before users engage. The updates target...
Meta rolls out anti-scam protections and AI scam detection across WhatsApp, Facebook, and Messenger
Security Tool/ServiceAbout this happening: Meta is rolling out **anti-scam protections** across **WhatsApp, Facebook, and Messenger**, using warnings and AI detection to block scams before users engage. The updates target...
Facebook worldwide account-access outage
Service Disruption
First: 04.03.2026 00:38
Last: 04.03.2026 00:38
Sources 1
About this happening:
Facebook is experiencing a **massive worldwide outage** that is making **accounts unavailable**, cutting off access for users across regions. The disruption began around **4:15 PM...
Facebook worldwide account-access outage
Service DisruptionAbout this happening: Facebook is experiencing a **massive worldwide outage** that is making **accounts unavailable**, cutting off access for users across regions. The disruption began around **4:15 PM...
Timeline
-
11.09.2025 12:05 2 articles · 8mo ago
SocialMetrics Pro fake Meta Verified malvertising disclosed
Initial DisclosureA malvertising campaign targets Facebook and Instagram profile holders by using malicious ads and video tutorials to push fake Meta Verified browser extensions named SocialMetrics Pro, which are hosted on Box and designed to steal Facebook session cookies, send them to a Telegram bot, query ipinfo[.]io/json for the victim's IP address, and in some variants use stolen cookies with the Facebook Graph API; at least 37 malicious ads were observed, and the operator set shows Vietnamese-speaking fingerprints.
Show sources
- Fake Madgicx Plus and SocialMetrics Extensions Are Hijacking Meta Business Accounts — thehackernews.com — 11.09.2025 12:05
- Fake Madgicx Plus and SocialMetrics Extensions Are Hijacking Meta Business Accounts — thehackernews.com — 11.09.2025 12:05