could be phished fb employee's account like it was in twitter bitcoin case?