I've fallen victim to this, but that was months ago. Malwarebytes is pretty slow on this topic.
But yes, it can happen to anybody and I knew the person who sent me the message, I just didn't read too carefully. Luckily, a friend asked me a day later if my account got hacked. Funnily enough, the attacker didn't change the password, so I could take control back and change credentials.