TLDR Tech / InfoSec
"AccountDumpling" – The Google-Sent Phishing Wave Hijacking 30k Facebook Accounts
A Vietnamese-linked group abuses Google AppSheet to send fully authenticated phishing emails that target Facebook business and high-value accounts, leading to at least 30,000 compromises. The campaign uses four main lures: Netlify-hosted fake Facebook help centers, Vercel-hosted “security” and blue badge flows, Google Drive PDFs that hide live phishing panels, and recruiter-style job approaches that move victims into one-to-one conversations. Stolen credentials, IDs, and 2FA codes flow into Telegram bots where operators take over accounts, resell access, and run recovery-for-hire schemes tied to identifiable Vietnamese personas and infrastructure.
Read the full story