Facebook Users Warned of Phishing Scam Offering Free Blue Verification Badge
A phishing campaign targeting Facebook users with emails promising a free blue verification badge has been identified by security researchers. The campaign, named AccountDumpling, is linked to a Vietnamese criminal operation and has compromised 30,000 accounts. The attackers use Google's AppSheet platform to send phishing emails, exploiting its notification mechanism. The emails lure users with the promise of a free badge, leading them through fake CAPTCHA and contact detail forms, ultimately capturing passwords and two-factor authentication codes. The campaign highlights the use of legitimate platforms for malicious purposes, complicating detection and prevention efforts.