A sophisticated phishing operation has compromised over 30,000 Facebook accounts globally, exploiting Google’s infrastructure to bypass security measures. This alarming breach, linked to Vietnamese threat actors, was reported on May 2, 2026.
Guardio Labs revealed that the operation, named AccountDumpling, employs advanced techniques. The attackers use Google AppSheet to send authenticated emails that lure victims with offers of a “free Facebook blue badge.” Intriguingly, these emails come from the legitimate address ‘[email protected]’, making it even harder for users to detect the scam.
The scale of this operation is staggering. Approximately 68.6% of the victims are from the United States. Attackers utilize various clusters—around 30 different types—to target specific groups of victims effectively.
Many individuals fall prey due to social engineering tactics that encourage them to share personal information. Once obtained, this data is sent to Telegram bots managed by users with aliases like ‘Big Bosss’ and ‘@mansinblack’.
This phishing campaign doesn’t just stop at Facebook accounts; it also includes fake job recruitment offers for major brands such as Adobe and Coca-Cola. These tactics highlight the evolving nature of online fraud.
Lerrin Johnson from the U.S. Fish and Wildlife Service recently stated about a different issue related to misinformation: “No wolves are being released in Texas, and we have no plans to release wolves in Texas.” This remark illustrates how misinformation can spread rapidly through platforms like Facebook.
The implications for account security are significant. As Meta works to enhance its defenses against such breaches, users must remain vigilant about unsolicited emails and offers that seem too good to be true.
As this situation unfolds, experts emphasize the need for improved awareness around phishing schemes like AccountDumpling. The real story here reflects a growing concern about online safety in our increasingly digital lives.
Ama Serwah
Kwame Ofori
Evelyn Mensah