A Glenmont man’s Facebook account was hacked during the holidays. His Facebook friend fell for the scammer’s tricks. Now she’s out $880.

This critical credential-stealing threat hides in your email, waiting to strike—here’s how it works and how to stop it.