The account details of some 7,600 Japanese Facebook users appear to have been stolen by scammers and stored on a server based in Russia, a cybersecurity company said Tuesday.

From around late June, domestic users started receiving videos from accounts impersonating a friend on the social media site, according to the government-linked Information-Technology Promotion Agency, Japan, and other sources.

When accessed, the video link takes the user to a fake website mimicking the Japanese Facebook login page, where account information can be stolen if entered.