All articles tagged with #salesforce data theft
The FBI issued a warning about two hacker groups, UNC6040 and UNC6395, targeting Salesforce environments to steal data and extort victims, with attacks involving social engineering, OAuth app abuse, and stolen tokens affecting numerous large companies. The groups are linked to extortion activities and have claimed to access sensitive law enforcement and corporate systems.
A cybercriminal group called UNC6040 has targeted around 20 organizations across various sectors in the Americas and Europe using fake IT support calls to trick employees into installing malicious versions of Salesforce's Data Loader, leading to data theft and extortion. The group employs voice-phishing tactics, impersonating IT support to gain access to Salesforce and other platforms, with some attacks resulting in long-term data exfiltration and potential partnerships with other threat actors. Salesforce has issued guidance on protecting against such social engineering attacks.