: Malicious actors use advanced search operators like intitle:"index of" and inurl:passwords.txt to find unprotected directories on web servers. If a server hosting a Facebook-related app or script misconfigures its directory permissions, it may accidentally list a .txt file containing usernames and passwords.
: Attackers also use malicious third-party apps disguised as photo editors or VPNs to trick users into providing their Facebook login details. How to Protect Your Account index of passwordtxt facebook install
: Regularly check your Facebook Activity Log to see "Where you're logged in" and log out of any unrecognized sessions. Re: Index Of Password Txt Facebook - Google Groups : Malicious actors use advanced search operators like