Attackers Abuse Google AppSheet, Netlify, and Telegram in Facebook Phishing Campaign
ID: dc2443b3-d3aa-5603-9898-bf044d8afc5a
STIX ID: report--dc2443b3-d3aa-5603-9898-bf044d8afc5a
Feed Name: cybersecurityNews.com
Threat Score
Guardio Labs describes "AccountDumpling," a large-scale phishing campaign (~30,000 Facebook accounts) that leverages Google AppSheet to send authenticated phishing messages that bypass SPF/DKIM/DMARC, harvest credentials and identity documents, exfiltrate data via Telegram bots for real-time account takeovers and resale, and is attributed to a Vietnamese-linked actor based on embedded author metadata.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.