10/14/2026
There is a Facebook Messenger hack going around right now. DO NOT click it or open it.
**RSTMC** (which also appears in search results as *Rumah Sakit TMC*, an Indonesian hospital domain rstmc) is not a legitimate Facebook service. In this context, it is almost certainly a **compromised or spoofed website used in a Messenger phishing campaign**.
When an account is taken over, attackers use automated bots to send mass messages to the victim’s contacts containing strange or short links (often using hacked third-party sites or lookalike domains).
# # # What to do now
1. **Do Not Click or Interact:** Immediate.
Avoid opening the link or replying to the message in Messenger. If you already clicked the link but didn't enter details, close the page immediately.
2. **Secure Your Account (If You Entered Credentials):** Preventive.
If you clicked the link and entered your username, password, or security code:
1. Immediately go to **Facebook Settings & Privacy > Accounts Center > Password and Security**.
2. Change your Facebook password.
3. Check **Where you're logged in** and log out of all unfamiliar sessions or devices.
4. Ensure **Two-Factor Authentication (2FA)** is turned on.
*Verification:* Check your login activity history under Facebook Security settings to confirm no unknown active sessions remain.
3. **Notify Your Friend via a Separate Channel:** Out-of-band contact.
Call, text, or email your friend directly outside of Facebook to let them know their account is compromised and sending phishing links to their contact list.
*Verification:* Once your friend acknowledges the alert, they can follow Facebook’s account recovery process at `[facebook.com/hacked](https://facebook.com/hacked)`.
