It seems a lot of people already seeing this ad. Probably the same ad is running from multiple facebook accounts. I am not sure if all the URLs are the same. If all of those URLs and the ads are the same, it is the same group who have been spreading this in social media. I am afraid to think how many people have already fallen for this trap. People who are in crypto but not experts are going to be victims of this trap.

There are several blackhat forums where some blackhat developers sell those scripts online just for a few hundred dollars. Don't ask me for the sources because I guess it's well-known already and I don't want to spread them further.