Cybercriminals have made use of social engineering to send spam messages with malicious links via instant messaging services. The messages contain links to pictures with alluring names such as sexy.jpg and Girls.jpg. The links to these pictures were actually downloaded from the Internet. The downloaders job is typical for these types of program download another malicious program to the infected computer. So that the user doesnt suspect anything, the downloaders also open the picture that was promised in the original spam message.”]
Source: https://securelist.com/a-malicious-addition-to-a-facebook-link/29635/