Signal

Vietnamese-linked phishing campaign compromises 30,000 Facebook accounts using Google AppSheet

Evidence first: scan the strongest sources, then decide whether to go deeper.

rss
phishingcredential_theftfacebookmalwarethreat_actor
Trend in the last 24h
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.
2 top sources shown
limited source diversity in top sources
Overview

A Vietnamese cyber operation named AccountDumpling has been identified using Google AppSheet as a phishing relay to target Facebook Business account owners.

Entities
MetaAccountDumpling
Score total
1.03
Momentum 24h
2
Posts
2
Origins
2
Source types
1
Duplicate ratio
0%
Why now
  • Recent discovery of the AccountDumpling campaign affecting 30,000 accounts.
  • Attackers exploit current trust in Meta Support communications.
  • Urgent need for awareness among Facebook Business users to prevent further compromise.
Why it matters
  • Highlights the use of trusted platforms like Google AppSheet in phishing attacks.
  • Demonstrates the scale of credential theft targeting Facebook Business accounts.
  • Shows ongoing monetization of stolen credentials via illicit marketplaces.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: medium
Recurring claims
  • A Vietnamese-linked operation uses Google AppSheet as a phishing relay to compromise Facebook accounts.
  • The campaign targets Facebook Business account owners by impersonating Meta Support and uses fake credential harvesting pages.
  • Approximately 30,000 Facebook accounts have been compromised and sold through an illicit storefront.
How sources frame it
  • The Hacker News: neutral
  • SC Media: neutral
This incident underscores the innovative use of legitimate platforms like Google AppSheet in phishing campaigns, emphasizing the need for enhanced user vigilance and security controls.
All evidence
All evidence
30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign
The Hacker News · thehackernews.com · 2026-05-01 18:09 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 2Origin domains: 2Duplicates: -
Showing 2 / 0
Top publishers (this list)
  • SC Media (1)
  • The Hacker News (1)
Top origin domains (this list)
  • scworld.com (1)
  • thehackernews.com (1)