Hackers are tricking employees at companies in Europe and the Americas into installing a modified version of a Salesforce-related app, allowing the hackers to steal reams of data, gain access to ...

Hackers are tricking employees at companies in Europe and the Americas into installing a modified version of a Salesforce-related app, allowing the hackers to steal reams of data, gain access to ...

They impersonate Salesforce representatives, tricking employees into installing a malicious version of the Data Loader app.

By installing the malicious program, the victims would grant UNC6040 “significant capabilities” to access, query, and exfiltrate sensitive information directly from the compromised Salesforce ...

Hackers posed as Salesforce IT staff, using vishing to trick employees into installing malicious software for data theft and extortion.

Google’s Threat Intelligence Group says a vishing threat called UNC6040 has been targeting Salesforce applications with a fake data loader.

The hackers have “proven particularly effective at tricking employees” into installing a modified version of Salesforce’s Data Loade.

They impersonate Salesforce representatives, tricking employees into installing a malicious version of the Data Loader app.