Google AppSheet Abuse Helped Phish 30,000 Facebook Accounts

AccountDumpling is an active, large-scale phishing campaign run by a Vietnam-linked operator that leverages Google AppSheet and mainstream cloud services to send authenticated-looking phishing emails to Facebook business/advertiser accounts; approximately 30,000 accounts across ~50 countries have been compromised and the stolen access is monetized through fraud, ad abuse, resale, and recovery services. The report details attacker TTPs (trusted-platform relay, cloud-hosted phishing pages, Telegram-based validation), targeted industries and geographies, and defensive mitigations and IOCs published by the researcher.