The malware has been fixed by Facebook repeatedly but it has resurfaced again, reports added.
It begins by advertising an app that tells Facebook users they can change the colour theme of their profile.
Download the app and you are directed to a malicious phishing site, Mashable reported.
The danger starts herewith.
The website targets users by stealing their Facebook Access Tokens by asking them to view a colour changer tutorial video.
Temporary access to the tokens allows hackers to connect to the user's Facebook friends.
If a user does not view the video, the website tries to get them to download the malicious application.
If a user is on a computer, the website leads them to download a pornographic video player.
"If the user is on an Android device, the site issues a warning saying the device has been infected and advises users to download a suggested app," said a report on Cheetah Mobile, a Chinese Internet company.
If you have downloaded the app, uninstall it immediately and change your Facebook password, it said.
For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.