A previously unreported phishing campaign targeting Facebook business accounts has been uncovered by Unit 42 researchers, who have identified new variants of the steal-stealing malware known as NodeStealer 2.0.