My friend accidentally pressed a link on Facebook, which redirected her to a consumer website similar to Amazon. When she realized it was a possible phishing link, she turned off her internet, changed her Facebook password, and logged out on all her devices. She told me her 2FA is turned on, and she already ran her malware bytes and Avast on her Mac OS, but nothing was found. Should she still be worried?

​

Thank you