Phishing Campaign Exploits Google AppSheets to Target Facebook Accounts

Researchers at Guardio uncovered a large phishing campaign that leveraged Google AppSheet notifications to send authenticated phishing emails impersonating Facebook alerts; the campaign has compromised more than 30,000 Facebook accounts and used a coordinated infrastructure across Netlify, Vercel, Google Drive and Telegram to harvest credentials and monetize accounts.