Researchers have spotted a new Facebook scam that could deceive also tech-savvy people and trick them into giving the attacker access to their Facebook accounts. The scam abuse Trusted Contacts, a Facebook account recovery feature that sends access codes to a selected list of trusted users friends in order to help you regain access to Facebook account in case you forget your password or lost access to your account. The attacker, who is posing as a victims friend thanks to the compromised account, asks the victim to share the recovery code. In an effort to help, you send the code youve just received to your friend using the code, the attacker can now steal your account from you, and use it to victimize other people.”]
Source: https://securityaffairs.co/wordpress/64276/cyber-crime/facebook-scam-trusted-contacts.html