If your friend's Facebook account has been hacked, there are a few things you can do to help them and protect yourself:
Don't engage with the hacker: If you receive a message from your friend's hacked account, avoid responding to it or clicking on any links they might send. Hackers often use these messages to spread malware or attempt to scam others.
Notify your friend: If you haven't already, try to reach out to your friend through other means (phone, text, or another social media platform) and let them know that their Facebook account has been hacked. They might not be aware of it yet, and they should take immediate action to secure their account.
Advise your friend to change their password: Suggest to your friend that they change their Facebook password as soon as possible. They can do this by going to the Facebook login page, clicking on "Forgotten Password," and following the steps to reset it.
Enable two-factor authentication (2FA): Encourage your friend to set up two-factor authentication for their Facebook account. This adds an extra layer of security and makes it harder for hackers to gain access.
Report the hacked account to Facebook: You can report the hacked account directly to Facebook. Go to the profile of the hacked account, click on the three dots (...) on the cover photo, and select "Find Support or Report Profile." Follow the instructions to report the account as compromised.
Check your own security: If the hacker messaged you, be cautious. Avoid clicking on any links they sent, and consider reviewing the security of your own accounts, especially if you've used the same password on multiple platforms.
Remember, it's important to inform your friend and encourage them to take the necessary steps to secure their account as soon as possible. Hacked accounts can be used to spread scams, spam, or malicious content, so acting quickly is essential.