AccountDumpling Google AppSheet Facebook phishing campaign
Campaign
Summary
Hide ▲
Show ▼
A Vietnamese-linked operation dubbed AccountDumpling is using Google AppSheet as a phishing relay to steal Facebook credentials, enabling account takeover at scale and resale in a black-market loop. The operation’s reach matters because it has already been tied to roughly 30,000 hacked accounts and uses trusted infrastructure to bypass filters and increase delivery success.
Related Happenings
Meta For Business Facebook Messenger fake-verification phishing campaign
Campaign
H score29
First: 07.07.2026 10:00
Last: 07.07.2026 10:00
Sources 1
About this happening:
A **phishing campaign** abused **Facebook Messenger chatbots** and fake verification lures to steal **Meta For Business** credentials and sensitive identity data, creating account...
Meta For Business Facebook Messenger fake-verification phishing campaign
CampaignAbout this happening: A **phishing campaign** abused **Facebook Messenger chatbots** and fake verification lures to steal **Meta For Business** credentials and sensitive identity data, creating account...
DCloud Uni-App scam website campaign
Campaign
H score70
First: 29.06.2026 14:57
Last: 29.06.2026 14:57
Sources 1
About this happening:
The **DCloud Uni-App** scam-site campaign has grown into a **236,493-domain** fraud network that steals credentials, drains crypto wallets, and impersonates major brands. The site...
DCloud Uni-App scam website campaign
CampaignAbout this happening: The **DCloud Uni-App** scam-site campaign has grown into a **236,493-domain** fraud network that steals credentials, drains crypto wallets, and impersonates major brands. The site...
GitBait phishing campaign targeting Mexican banks
Campaign
H score20
First: 17.06.2026 17:00
Last: 17.06.2026 17:00
Sources 1
About this happening:
A **long-running GitBait phishing campaign** is stealing **banking credentials** from customers of **Mexican financial institutions**, using **GitHub Pages** and **SheetBest** to...
GitBait phishing campaign targeting Mexican banks
CampaignAbout this happening: A **long-running GitBait phishing campaign** is stealing **banking credentials** from customers of **Mexican financial institutions**, using **GitHub Pages** and **SheetBest** to...
UK under-16 social media age-check ban
Public Sector Action
H score25
First: 16.06.2026 17:38
Last: 16.06.2026 17:38
Sources 1
About this happening:
The **UK government** announced a ban on **under-16s** using social media, requiring **age checks** for new accounts and tightening access to major platforms. The rollout is set f...
UK under-16 social media age-check ban
Public Sector ActionAbout this happening: The **UK government** announced a ban on **under-16s** using social media, requiring **age checks** for new accounts and tightening access to major platforms. The rollout is set f...
FTC imposter-scam warning and Impersonation Rule enforcement
Public Sector Action
H score33
First: 16.06.2026 16:42
Last: 16.06.2026 16:42
Sources 1
About this happening:
The **FTC** warned that **Americans** lost **$3.5 billion** to **imposter scams** in **2025**, elevating a major public anti-fraud response around impersonation-driven theft. The...
FTC imposter-scam warning and Impersonation Rule enforcement
Public Sector ActionAbout this happening: The **FTC** warned that **Americans** lost **$3.5 billion** to **imposter scams** in **2025**, elevating a major public anti-fraud response around impersonation-driven theft. The...
Timeline
-
01.05.2026 21:09 2 articles · 2mo ago
Guardio discloses Vietnamese-linked AccountDumpling Facebook phishing campaign
Initial DisclosureGuardio discloses AccountDumpling, a Vietnamese-linked operation that used a Google AppSheet address such as [email protected] to send Meta Support-themed phishing emails to Facebook Business account owners, route victims to fake pages and PDF lures, collect credentials, 2FA codes, and identity data, and forward stolen records to attacker-controlled Telegram channels. Guardio estimates the campaign has compromised roughly 30,000 Facebook accounts and supported an illicit storefront that resells stolen accounts.
Show sources
- 30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign — thehackernews.com — 01.05.2026 21:09
- 30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign — thehackernews.com — 01.05.2026 21:09