Experts are warning against opening video links sent from friends as a new scam spreads across social media.
What's catching people out is it can come from your closest friends without warning.
The message shows the recipient's name, the word "video" and a shocked emoji - but there is no video.
And clicking on the link is not a good idea.
After clicking the link, victims are taken to a fake YouTube channel which is booby-trapped with nasty software, according to Kaspersky researchers.
It then tries to load malware onto your device and steal Facebook credentials.
IT security research David Jacoby wrote in a blog post: "The link points to a Google Doc.
"The document has already taken a picture from the victim's Facebook page and created a dynamic landing page which looks like a playable movie.
"When the victim clicks on the fake playable movie, the malware redirects them to a set of websites which enumerate their browser, operating system, and other vital information.
"Depending on their operating system they are directed to other websites."
In worst cases, it can infect your gadget and allow crooks to steal your credit card details, and direct your internet browser to dodgy websites.