Summary

A phishing campaign linked to Vietnamese threat actors has compromised approximately 30,000 Facebook accounts using Google AppSheet as a phishing relay. The operation, named AccountDumpling by Guardio, involves selling the stolen accounts through an illicit storefront.

Key Points

• The phishing campaign is linked to Vietnamese threat actors.
• Google AppSheet is used as a "phishing relay" to distribute phishing emails.
• The operation is codenamed AccountDumpling by Guardio.
• Approximately 30,000 Facebook accounts have been compromised.
• Stolen accounts are sold through an illicit storefront operated by the threat actors.

Analysis

This incident highlights the increasing sophistication of phishing campaigns, leveraging legitimate platforms like Google AppSheet to bypass security measures and reach a large number of potential victims. The scale of the operation, with 30,000 accounts compromised, underscores the need for heightened vigilance and improved security measures to protect user accounts on social media platforms.

Conclusion

IT professionals should enhance email filtering systems and educate users on recognizing phishing attempts. Regularly updating security protocols and monitoring for unusual account activity can help mitigate such threats.