“I can’t believe he’s gone. I’m gonna miss him so much.” If you see a post on Facebook with these words (or even in this vein), watch out—your friend’s account is being used to spread a phishing scam. Here’s how it works: An attacker steals an account. Then they post this vague but worrisome message, along with a website link that looks legitimate. (It’s usually an URL that starts with the Facebook domain or looks like an embedded video from BBC News.) The link redirects to a phony site that asks for your Facebook login info to proceed. If you enter it, the page captures your credentials. Afte…