Google AppSheet Exploited in 30,000-User Facebook Phishing Operation

Guardio Labs uncovered "AccountDumpling," a Vietnamese-linked phishing campaign exploiting Google AppSheet to send authenticated phishing emails that have compromised over 30,000 Facebook accounts worldwide; the operation uses multiple clusters (Netlify clones, reward lures with homoglyphs, live WebSocket operator panels to capture 2FA, and recruitment scams) and exfiltrates data to Telegram bots for resale or fraud.