@FACEBOOKMAIL.COM INVITES EXPLOITED TO PHISH FACEBOOK BUSINESS USERS

Summary from the TLDR InfoSec newsletter

Attackers sent 40,000 phishing emails to 5,000 Facebook Business users by exploiting Meta's invitation feature to send credential-harvesting links from @facebookmail.com, targeting SMBs in various sectors with fake invites that redirected to phishing pages which mimicked Meta branding.