Cyber scam hacks 30000 Facebook accounts

Cybercriminals from Vietnam hacked around 30,000 Facebook accounts using fake emails sent via Google AppSheet as a phishing relay.

Security firm Guardio named this sophisticated campaign “AccountDumpling”. Emails claiming to be from Meta Support deceive people into accessing a malicious link by mimicking Facebook business account logins. The notifications state that it will delete the account if the appeal isn’t submitted in a timely manner. They are sent via “noreply@appsheet.com” emails, thus bypassing spam filters.

When victims click on links, they are directed to fake pages where they enter their login information. The attackers steal credentials and then sell them on underground shops they control. Researcher Shaked Chen, who described it as a “dynamic operation, with live panels, anti-detection tricks, and constant updates, said that it was an operation with the characteristics of a computer game.

This scam illustrates how Vietnamese scammers are adapting to steal and profit from accounts. The victims include countries such as USA, India, Italy, Canada, Australia, etc.

Key Scam Tactics

• Fake sender: Looks like official Meta but uses unrelated domains.
• Claims account suspension/deletion: Urgent threats.
• Tricky links: hover over suspicious urls – don’t click!

Check emails always through the official settings of Facebook at Accounts Center > Recent emails. Report to phish@fb.com. Use two-factor authentication and block pop-ups and links from unknown websites. This phishing wave shows the growing risks of account stealing. Users around the world need to be vigilant to safeguard their personal and business profiles.