How Does the FacexWorm Malware Work?
If the malicious video link is opened using Chrome browser, FacexWorm redirects the victim to a fake YouTube page, where the user is encouraged to download a malicious Chrome extension as a codec extension to continue playing the video.
https://thehackernews.com/2018/05/facebook-cryptocurrency-hacking.html