Vietnamese Cybercriminals Hack 30,000 Facebook Accounts Using Google AppSheet

A Vietnamese-linked cybercriminal operation, codenamed AccountDumpling by Guardio, exploited Google AppSheet as a phishing relay to distribute malicious emails targeting Facebook accounts. The campaign compromised approximately 30,000 Facebook accounts, which were subsequently sold through an illicit storefront operated by the threat actors. The attack leveraged phishing techniques to steal credentials, though no specific technical vulnerabilities (e.g., CVE IDs) or exact dates were disclosed. The primary impact involved unauthorized access and monetization of hijacked accounts via underground markets. No additional geographic or temporal details about the campaign’s execution were provided.