AccountDumpling Google AppSheet Facebook phishing campaign
Campaign
Summary
Hide ▲
Show ▼
A Vietnamese-linked operation dubbed AccountDumpling is using Google AppSheet as a phishing relay to steal Facebook credentials, enabling account takeover at scale and resale in a black-market loop. The operation’s reach matters because it has already been tied to roughly 30,000 hacked accounts and uses trusted infrastructure to bypass filters and increase delivery success.
Related Happenings
Ghost Stadium FIFA World Cup fraud campaign
Campaign
First: 27.05.2026 14:28
Last: 27.05.2026 14:28
Sources 1
About this happening:
A **Ghost Stadium** fraud campaign has registered **4,300+ FIFA lookalike domains** and is using **paid Facebook ads** to funnel **2026 FIFA World Cup** fans into phishing and tic...
Ghost Stadium FIFA World Cup fraud campaign
CampaignAbout this happening: A **Ghost Stadium** fraud campaign has registered **4,300+ FIFA lookalike domains** and is using **paid Facebook ads** to funnel **2026 FIFA World Cup** fans into phishing and tic...
TrickMo C TikTok-lure campaign targeting banking and wallet users in France, Italy, and Austria
Campaign
First: 11.05.2026 18:15
Last: 11.05.2026 18:15
Sources 1
About this happening:
The **TrickMo** operators ran an active **TikTok-themed** campaign between **January and February 2026**, targeting **banking and wallet users** in **France, Italy and Austria**....
TrickMo C TikTok-lure campaign targeting banking and wallet users in France, Italy, and Austria
CampaignAbout this happening: The **TrickMo** operators ran an active **TikTok-themed** campaign between **January and February 2026**, targeting **banking and wallet users** in **France, Italy and Austria**....
Google sponsored search ManageWP phishing campaign
Campaign
First: 07.05.2026 00:36
Last: 07.05.2026 00:36
Sources 1
About this happening:
A **phishing campaign** is abusing **Google sponsored search results** to impersonate **ManageWP** and steal login credentials, **2FA codes**, and account access. The operation ma...
Google sponsored search ManageWP phishing campaign
CampaignAbout this happening: A **phishing campaign** is abusing **Google sponsored search results** to impersonate **ManageWP** and steal login credentials, **2FA codes**, and account access. The operation ma...
Rising social-media scam losses among U.S. consumers in 2025
Target Trend
First: 27.04.2026 19:27
Last: 27.04.2026 19:27
Sources 1
About this happening:
**Social media scams** drove a sharp rise in consumer losses in **2025**, with reported losses reaching **$2.1 billion** and nearly **30%** of scam-loss reports starting on these...
Rising social-media scam losses among U.S. consumers in 2025
Target TrendAbout this happening: **Social media scams** drove a sharp rise in consumer losses in **2025**, with reported losses reaching **$2.1 billion** and nearly **30%** of scam-loss reports starting on these...
FakeWallet Apple App Store wallet-stealing apps
Malware Activity
First: 21.04.2026 00:52
Last: 21.04.2026 00:52
Sources 1
About this happening:
The **FakeWallet** app set turned the **Apple App Store** into a delivery channel for **26 malicious wallet lookalikes**, putting crypto holders at risk of account takeover and th...
FakeWallet Apple App Store wallet-stealing apps
Malware ActivityAbout this happening: The **FakeWallet** app set turned the **Apple App Store** into a delivery channel for **26 malicious wallet lookalikes**, putting crypto holders at risk of account takeover and th...
Timeline
-
01.05.2026 21:09 2 articles · 26d ago
Guardio discloses Vietnamese-linked AccountDumpling Facebook phishing campaign
Initial DisclosureGuardio discloses AccountDumpling, a Vietnamese-linked operation that used a Google AppSheet address such as [email protected] to send Meta Support-themed phishing emails to Facebook Business account owners, route victims to fake pages and PDF lures, collect credentials, 2FA codes, and identity data, and forward stolen records to attacker-controlled Telegram channels. Guardio estimates the campaign has compromised roughly 30,000 Facebook accounts and supported an illicit storefront that resells stolen accounts.
Show sources
- 30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign — thehackernews.com — 01.05.2026 21:09
- 30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign — thehackernews.com — 01.05.2026 21:09