Lately I've been seeing a bunch of posts from compromised accounts on Facebook composed of an inner and outer post, with the outer post stating something like "I can't believe he's gone <emoji><emoji>" and the inner post being a link to what is obviously a scam site with an image made to look like a YouTube screenshot for a local news report about a tragic vehicle accident.

This simple pattern alone should be simple enough for Facebook to shut down immediately, yet not only does it continue but every time I report it Facebook claims it does not violate their community standards (usually a week or two after the initial report). Until recently, where the posts are deleted before Facebook's slow process gets around to actually looking at it.

Because of Facebook's complete inaction in this case, I've mostly just resigned to commenting "DO NOT CLICK" on these posts. On one such occasion, I got a response from one of the account owner's friends that mentioned that it doesn't show up on their timeline. That didn't immediately register with me as being any more suspicious than the rest of the post, but eventually I realized that all these posts are marked as public. So I went to this person's public profile (of whom I am not a friend) and was not able to find this recent "public" post. Both the inner and outer posts are marked as worldly public, posted March 14, 2024, yet the most recent public post on their profile is from October 2017 (logged into my own account, in a private window I can't even view their account).

This is either a security flaw or exploit that is being used to attack Facebook users and needs to be addressed ASAP.