A Vietnamese-linked threat group called AccountDumpling has compromised approximately 30,000 Facebook Business accounts by routing phishing emails through Google AppSheet’s legitimate infrastructure, bypassing standard spam filters. The operation captures both passwords and two-factor authentication codes, then locks victims out and resells account access through an attacker-controlled storefront. Organizations using Facebook Business accounts for advertising, customer engagement, or revenue generation face direct financial loss and brand exposure if accounts are seized and their advertising credit is drained or audience data is sold.