30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign

Guardio researchers uncovered "AccountDumpling," a Vietnamese-linked phishing operation that leverages Google AppSheet, Netlify, Vercel, Google Drive/Canva assets, and Telegram channels to phish Facebook Business account owners, exfiltrate credentials/2FA/IDs for roughly 30,000 victims worldwide, and monetize the access via an illicit storefront, showing real-time operator panels, evasion techniques, and reuse of trusted platforms as delivery and hosting layers.