Attackers are sending convincing phishing emails that appear to come from Facebook, targeting small and medium-sized businesses. Using the official @facebookmail.com domain, they trick victims into clicking links to credential harvesting sites. Companies in various sectors, including finance and education, have been particularly affected.