Facebook Business Page Compromised

[CaliZ]

Hello,

A business customer of ours said that their Facebook business page was compromised. They were first notified that spam was displayed on the page, then it was completely wiped, and now sits as a blank page.

They also cannot login to their personal account (Assigned as owner to the business page) as the credentials work, but at the "enter the 6-digit key" page simply displays "The page has encountered an error, try again later." regardless of having the MFA key and repeating the steps on another computer/browser/network.

I've tried to reach out to Facebook using another persons recommended contact of disabled@fb.com but have not heard anything back for about two weeks now.

Is there any suggestions anyone might have in trying to regain access, and restoring the page?

 

[frase]

No chance or go through the blackhole in time that is Facebook support. Another reason not to rely on Faceberk for a business.

COMPROMISED ACCOUNT

 

[timeshifter]

Not sure about restoring access, but maybe some public shaming of Facebook on social media might help.

I'm not really skilled at this. I think I got the attention of a bank once this way when I was frustrated about an hour long plus hold time for something simple. But I know of others who tweet @companynamesupport or whatever. They kindly air their frustrations and beg for help.

Since it's a message that the public can see it seems that companies are quick to respond and show they care - vs the black hole of unreturned emails and phone calls.

 

[frase]

I don't really think "Meta" care really, just faceless entities to them.

 

[Markverhyden]

I don't really think "Meta" care really, just faceless entities to them.

"Please press 9 to submit a ticket"
Press 9
"Please leave a massage and someone will get back to you with in an hour".......

 

[frase]

"Please press 9 to submit a ticket"
Press 9
"Please leave a massage and someone will get back to you with in an hour".......

Happy ending?

 

[nlinecomputers]

Happy ending?

Well you usually do get screwed by Facebook…

 

[Sky-Knight]

Business page without MFA secured accounts... and only 1 account that can access it?

When will people learn... you aren't paying, therefore you're the product, and no... there's no support because again, you aren't paying.

 

[CaliZ]

Business page without MFA secured accounts... and only 1 account that can access it?

When will people learn... you aren't paying, therefore you're the product, and no... there's no support because again, you aren't paying.

That is the crazy part, this client does have MFA enabled. So unless their system was compromised.

 

[Sky-Knight]

That is the crazy part, this client does have MFA enabled. So unless their system was compromised.

What kind of MFA? SMS and Email based MFA don't count... Nor does a phone call or anything else related to a cell phone that's outside of a dedicated app.

 

[CaliZ]

What kind of MFA? SMS and Email based MFA don't count... Nor does a phone call or anything else related to a cell phone that's outside of a dedicated app.

They had it configured for SMS. (We've been recommending Microsoft's Authenticator as it has an additional layer of protection.)

 

[Sky-Knight]

They had it configured for SMS. (We've been recommending Microsoft's Authenticator as it has an additional layer of protection.)

The problem with SMS and phone call based authentication, is anyone that targets an enterprise directly will quickly know what cell phone number it is, and build or acquire a sim that matches to intercept those notifications.

This isn't an uncommon thing, it's a hugely common thing. And what's equally common are vulnerabilities in Facebooks authentication system that simply bypass the 2FA requirement entirely. The most common of which I've seen is malware running on a machine owned by the client in question that manipulates the browser locally. No way to really fix this either... unless you're simply never saving login details.

But again, your customer is the product not the client. So all you have is this: https://www.facebook.com/help/1216349518398524

And understand that anything you build in Facebook, never belongs to you and can go away at anytime, and you have no recourse. This truth applies to all social media.