Active
#techscam campaign distributed via
@Facebook #malvertising. The actor is buying paid ads and redirects to
#scam pages hosted on Azure Front Door (azurefd[.]net) and Azure Static Web Apps. The pages claim that your Facebook account has been disabled and show a phone number to call.
Two geo-targeted variants with localized phone numbers:
🇦🇺 AU: (02) 8317-1495 → x33t-exhqghg6dpcqdzfx[.]z02[.]azurefd[.]net
🇺🇸 US: 1(844)675-1907 → read-hsd5ashygqhgfqcd[.]z02[.]azurefd[.]net