Yow, I just got successfully phished on the Facebook Android app. I clicked on "Your friend X tagged in a post" and this thing managed to put a browser window over the top of the FB app so it looked like I was still in the app, totally consistent style, and asked for a Facebook login, which I haven't done for years so I thought made sense. I fell for it, and I bet most people wouldn't have noticed it was sketchy, which I fortunately did; password hastily changed….

@timbray
Life Hack: NEVER open a link someone sends you. If it’s even in question, go to the account yourself and see what’s up.

I seem to be getting a plethora of “We can’t deliver your package” texts with a fake UPS/USPS looking link. I have informed delivery so I know they’re fake.