BleepingComputerPublished
Google: Hackers target Salesforce accounts in data extortion attacks
By Bill Toulas
Excerpt
Google has observed hackers claiming to be the ShinyHunters extortion group conducting social engineering attacks against multi-national companies to steal data from organizations' Salesforce platforms.
According to Google's Threat Intelligence Group (GTIG), which tracks the threat cluster as 'UNC6040,' the attacks target English-speaking employees with voice phishing attacks to trick them into connecting a modified version of Salesforce's Data Loader application.
The attackers impersonate IT support personnel, requesting the target employee to accept a connection to Salesforce Data Loader, a client application that allows users to import,…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by BleepingComputer on bleepingcomputer.com.
Mentioned in the excerpt
More from BleepingComputer6
- French tax authority data breach affects 678,000 individualsBleepingComputer · Published 17 Aug
- Maze Ransomware Releases Files Stolen from City of PensacolaBleepingComputer · Published 24 Dec 2019
- WestJet investigates cyberattack disrupting internal systemsBleepingComputer · Published 14 Jun 2025
- Nemty 1.6 Ransomware Released and Pushed via RIG Exploit KitBleepingComputer · Published 11 Oct 2019
On the same topics
- Ragnar LoaderPRODAFT · Added 18 Oct
- Netwalker malware: What it is, how it works and how to prevent itInfosec Institute · Published 29 Jul 2020
- How CrowdStrike Analyzes macOS Malware to Optimize Automated DetectionCrowdStrike · Published 6 May 2022
- Disrupting Fox Tempest: A cybercrime service that turned “verified” software into a pathway for ransomwareMicrosoft · Published 19 May
