All day Facebook tells us that they keep the user privacy and security, according to Blaze’s (not the orange one) Security blog you can be hacked through Facebook IM chat.
In the report the publisher claims that if you receive image file with no text, that means that someone can hack your account. The image is SVG file, and that how the hackers can hack your account. The SVG file is bypassing Facebook filters.
Scalable Vector Graphics (SVG) is an XML-based vector image format for two-dimensional graphics with support for interactivity and animation. The SVG specification is an open standard developed by the World Wide Web Consortium (W3C) since 1999.
Again we see that all the “secure” and encrypted IM clients are not that secure. And BBM is the best option to keep yourself out of the malware game.