30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign

SITREP: A Vietnamese-linked phishing operation, codenamed AccountDumpling, has compromised approximately 30,000 Facebook accounts using Google AppSheet as a phishing relay. The stolen accounts are being sold through an illicit storefront operated by the threat actors. TACTICAL ASSESSMENT: This operation highlights the increasing sophistication of phishing campaigns and the exploitation of legitimate platforms for malicious purposes. The scale of the breach indicates a significant threat to user security and trust in online platforms. PROJECTED VECTORS: It is likely that this operation will continue to evolve, potentially leading to further compromises of social media accounts and increased scrutiny of app-based security measures.