Hackers have been using Facebook ads to distribute malware, specifically the 'infostealer' known as 'SYS01 stealer.' This malware can steal sensitive information such as cookies and login credentials when downloaded on a computer disguised as Windows themes or other programs. The malware campaign has also been spotted on LinkedIn and YouTube ads since September 2023. Despite warnings from security researchers, the campaign is still active and evolving to better evade detection.