Attackers are capitalising on the power of the Facebook brand by sending emails that appear to be from Facebook Ads Manager

The plan is to trick victims into providing their credentials and credit card information on a Facebook lead generation form

The "appeal form" link takes visitors to a credential-harvesting site that collects passwords and credit card information using a real Facebook lead-generation form

#CoSoSec

https://www.cysecurity.news/2022/09/attackers-abuse-facebook-ad-manager-in.html