Facebook credential phishing via Facebook Messenger

Facebook Messenger is being actively used for phishing Facebook user credentials. In the attempts, a hacked account is used to send messages with the aim of obtaining the recipients' telephone numbers and two-factor authentication codes to hijack their Facebook accounts. The best way to protect yourself from this scam is to be wary of Facebook messages from all senders, including people you know.