We can only imagine what it must be like in glass offices at Facebook. Just when it seems things can’t get much worse for Zuck & Co., it does. After being in news for sharing users sensitive information, Facebook is now being used as a phishing platform by a new cryptocurrency mining virus called FacexWorm.

The culprit is a malicious Chrome extension that spreads through a video link on Facebook messenger. In addition to run-of-the-mill crypto mining, FacexWorm also can gain access to account credentials of users of cryptocurrency trading platforms. Here’s hoping for a better Monday in Menlo Park.