Facebook Messenger flaw allows attackers to alter chats and spread malware and phishing links