Messages from “friends” saying “Is this you in this video?” followed by a strange link. That link steals your login session.
Instead:
