AccountDumpling Google AppSheet Facebook phishing campaign
Campaign
Summary
Hide ▲
Show ▼
A Vietnamese-linked operation dubbed AccountDumpling is using Google AppSheet as a phishing relay to steal Facebook credentials, enabling account takeover at scale and resale in a black-market loop. The operation’s reach matters because it has already been tied to roughly 30,000 hacked accounts and uses trusted infrastructure to bypass filters and increase delivery success.
Related Happenings
GPPStorm Google Partners enrollment phishing campaign
Campaign
H score33
First: 13.07.2026 16:03
Last: 13.07.2026 16:03
Sources 1
About this happening:
GPPStorm is a phishing campaign that uses bogus Google Partners and Google Premier Partner enrollment workflows to push recipients to a fake Google sign-in page and st...
GPPStorm Google Partners enrollment phishing campaign
CampaignAbout this happening: GPPStorm is a phishing campaign that uses bogus Google Partners and Google Premier Partner enrollment workflows to push recipients to a fake Google sign-in page and st...
Meta For Business Facebook Messenger fake-verification phishing campaign
Campaign
H score29
First: 07.07.2026 10:00
Last: 07.07.2026 10:00
Sources 1
About this happening:
A phishing campaign abused Facebook Messenger chatbots and fake verification lures to steal Meta For Business credentials and sensitive identity data, creating account...
Meta For Business Facebook Messenger fake-verification phishing campaign
CampaignAbout this happening: A phishing campaign abused Facebook Messenger chatbots and fake verification lures to steal Meta For Business credentials and sensitive identity data, creating account...
DCloud Uni-App scam website campaign
Campaign
H score70
First: 29.06.2026 14:57
Last: 29.06.2026 14:57
Sources 1
About this happening:
The DCloud Uni-App scam-site campaign has grown into a 236,493-domain fraud network that steals credentials, drains crypto wallets, and impersonates major brands. The site...
DCloud Uni-App scam website campaign
CampaignAbout this happening: The DCloud Uni-App scam-site campaign has grown into a 236,493-domain fraud network that steals credentials, drains crypto wallets, and impersonates major brands. The site...
GitBait phishing campaign targeting Mexican banks
Campaign
H score20
First: 17.06.2026 17:00
Last: 17.06.2026 17:00
Sources 1
About this happening:
A long-running GitBait phishing campaign is stealing banking credentials from customers of Mexican financial institutions, using GitHub Pages and SheetBest to...
GitBait phishing campaign targeting Mexican banks
CampaignAbout this happening: A long-running GitBait phishing campaign is stealing banking credentials from customers of Mexican financial institutions, using GitHub Pages and SheetBest to...
UK under-16 social media age-check ban
Public Sector Action
H score25
First: 16.06.2026 17:38
Last: 16.06.2026 17:38
Sources 1
About this happening:
The UK government announced a ban on under-16s using social media, requiring age checks for new accounts and tightening access to major platforms. The rollout is set f...
UK under-16 social media age-check ban
Public Sector ActionAbout this happening: The UK government announced a ban on under-16s using social media, requiring age checks for new accounts and tightening access to major platforms. The rollout is set f...
Timeline
-
01.05.2026 21:09 2 articles · 2mo ago
Guardio discloses Vietnamese-linked AccountDumpling Facebook phishing campaign
Initial DisclosureGuardio discloses AccountDumpling, a Vietnamese-linked operation that used a Google AppSheet address such as [email protected] to send Meta Support-themed phishing emails to Facebook Business account owners, route victims to fake pages and PDF lures, collect credentials, 2FA codes, and identity data, and forward stolen records to attacker-controlled Telegram channels. Guardio estimates the campaign has compromised roughly 30,000 Facebook accounts and supported an illicit storefront that resells stolen accounts.
Show sources
- 30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign — thehackernews.com — 01.05.2026 21:09
- 30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign — thehackernews.com — 01.05.2026 21:09