[The Pact]

My friend claims his Facebook was hacked just by him accepting a friend request...?
Really? I thought he would have had to click a link. Is this a thing now?

[335i]

What constitutes a “hack” in this sense?

It’s been common for a long time for spammers to add accounts so they can tag you in a post which will notify your friends.

If his account was completely compromised I guarantee it wasn’t just from the friend request alone.

[The Pact]

What constitutes a “hack” in this sense?

It’s been common for a long time for spammers to add accounts so they can tag you in a post which will notify your friends.

If his account was completely compromised I guarantee it wasn’t just from the friend request alone.

There's a thing lately also where people are making fake accounts that copy some of my friend's accounts. None of this stuff is happening to me but it's been happening to my friends.
I'm trying to ask him now if his whole account was compromised or what. He made a new account.

---

What constitutes a “hack” in this sense?

It’s been common for a long time for spammers to add accounts so they can tag you in a post which will notify your friends.

If his account was completely compromised I guarantee it wasn’t just from the friend request alone.

I don't really get it are they adding fake accounts? How are they tagging all your friends. Is all this stuff not happening to me because I have the highest privacy settings and two fact aunthentification even though 2fa is a pain in the ass?

[335i]

There's a thing lately also where people are making fake accounts that copy some of my friend's accounts. None of this stuff is happening to me but it's been happening to my friends.
I'm trying to ask him now if his whole account was compromised or what. He made a new account.

---

I don't really get it are they adding fake accounts? How are they tagging all your friends. Is all this stuff not happening to me because I have the highest privacy settings and two fact aunthentification even though 2fa is a pain in the ass?

It’s not that they’re tagging all your friends, but surely you’ve seen the “Jason Bourne was tagged in a photo” notification. They take advantage of these notifs to spam phishing or other types of schemes to the profile’s friends.

You likely haven’t encountered them on your own profile because you don’t add random, fake accounts ha.

And yes making fake profiles and adding the same friends from a targeted profile is common as well.

Again I would wager that his account was probably not compromised, instead it’s one of these methods being used. FB has decent security when it comes to logging into a verified personal account

[guardian]

Did he receive some kind of an email notification with the friend request? Maybe that's what he meant and he clicked a link in there. How does he know it was the friend request that got his account hacked? Was he logged out afterwards or something? Maybe some kind of CSRF? I mean I think that a company such as Facebook has some good protection in place for attacks like that, but you never know.

I don't really get it are they adding fake accounts? How are they tagging all your friends. Is all this stuff not happening to me because I have the highest privacy settings and two fact aunthentification even though 2fa is a pain in the ass?

I don't think that 2FA is the reason that this is not happening to you man. This is called mentioning and is a popular technique to generate traffic. They probably just scrape friend lists, lots of people have their friend lists publicly accessible.