An investigation traces an NSO Group-controlled IP address to a fake Facebook security portal.
Source: Threadpost