This feature allowed users to view their own Facebook page as another user would.
The video uploader generated a user token that gave the attackers full access to the other users Facebook profile.
We have a wide range of industry-leading measures in place to protect people across our platforms.
source: www.techworm.net