AppSheet-Driven Phishing Campaign Exposes 30,000 Facebook Accounts
A Vietnamese-linked operation hijacks Facebook accounts by using Google AppSheet as a phishing relay, targeting Business account owners to capture credentials and 2FA data, with roughly 30,000 victim records spread across several clusters (Netlify, CAPTCHA-gated pages, and Canva-generated PDFs) that feed the stolen data to Telegram channels and facilitate resale on underground markets; the campaign illustrates evolving tactics and the repurposing of trusted platforms in a dark, criminal economy.
