A huge phishing campaign is hitting Facebook and Messenger. Have you gotten a message from your friend that links to a sign in page?
phish
Ever sign into a site using another credential? Browser-in-the-Browser phishing takes advantage of your familiarity with the process.