Thousands of Facebook accounts stolen by phishing emails sent through Google

Researchers uncovered a long-running phishing campaign that leverages Google AppSheet to send emails that bypass common email authentication and appear as legitimate Facebook notifications; the operation — attributed to actors in Vietnam — has compromised around 30,000 primarily business and ad-related Facebook accounts, which are then used for fraud, malicious ads, or sold, with stolen credentials processed via Telegram-based infrastructure.