Scammers Use Google Services for Large-Scale Phishing Attack on Facebook Business Accounts

Scammers are exploiting Google AppSheet and Google Drive to bypass security filters in a large-scale phishing operation targeting Facebook Business accounts. The campaign has compromised approximately 30,000 users globally, leveraging legitimate Google services to evade detection. The attack, dubbed "AccountDumpling," involves fraudulent links hosted on Google Drive that redirect victims to malicious phishing pages. No specific dates or CVE IDs were mentioned in the report, but the operation highlights the abuse of trusted cloud platforms for credential theft. The primary impact includes unauthorized access to and theft of Facebook Business accounts.