Hackers are using Facebook ads to infect Windows PCs with password-stealing malware — how to stay safe | Tom’s Guide

Clicking on one of these fake ads takes potential victims to malicious sites hosted on Google Sites or True Hosting which appear to be download pages for the themes or software advertised on Facebook. These sites have a download button that when clicked, downloads a ZIP file with a name that matches the product advertised online.