30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign
Summary
A Vietnamese-linked operation, dubbed AccountDumpling, is using Google AppSheet as a phishing relay to steal Facebook accounts. The stolen accounts are then sold on an illicit storefront, with approximately 30,000 accounts compromised in this campaign.
IFF Assessment
FOE
This campaign directly leads to the compromise and illicit sale of user accounts, representing a loss of digital identity and privacy.
Defender Context
This incident highlights the evolving tactics of threat actors, leveraging legitimate cloud services like Google AppSheet for malicious purposes. Defenders should be aware of phishing campaigns that might appear to originate from trusted platforms and educate users on identifying such deceptive practices.