onlyTrustedInfo.comonlyTrustedInfo.comonlyTrustedInfo.com
Notification
Font ResizerAa
  • News
  • Finance
  • Sports
  • Life
  • Entertainment
  • Tech
Reading: Hackers abuse modified Salesforce app to steal data, extort companies, Google says
Share
onlyTrustedInfo.comonlyTrustedInfo.com
Font ResizerAa
  • News
  • Finance
  • Sports
  • Life
  • Entertainment
  • Tech
Search
  • News
  • Finance
  • Sports
  • Life
  • Entertainment
  • Tech
  • Advertise
  • Advertise
© 2025 OnlyTrustedInfo.com . All Rights Reserved.
Tech

Hackers abuse modified Salesforce app to steal data, extort companies, Google says

Last updated: June 5, 2025 12:30 am
Oliver James
Share
3 Min Read
Hackers abuse modified Salesforce app to steal data, extort companies, Google says
SHARE

By AJ Vicens

(Reuters) -Hackers are tricking employees at companies in Europe and the Americas into installing a modified version of a Salesforce-related app, allowing the hackers to steal reams of data, gain access to other corporate cloud services and extort those companies, Google said on Wednesday.

The hackers – tracked by the Google Threat Intelligence Group as UNC6040 – have “proven particularly effective at tricking employees” into installing a modified version of Salesforce’s Data Loader, a proprietary tool used to bulk import data into Salesforce environments, the researchers said.

The hackers use voice calls to trick employees into visiting a purported Salesforce connected app setup page to approve the unauthorized, modified version of the app, created by the hackers to emulate Data Loader.

If the employee installs the app, the hackers gain “significant capabilities to access, query, and exfiltrate sensitive information directly from the compromised Salesforce customer environments,” the researchers said.

The access also frequently gives the hackers the ability to move throughout a customer’s network, enabling attacks on other cloud services and internal corporate networks.

Technical infrastructure tied to the campaign shares characteristics with suspected ties to the broader and loosely organized ecosystem known as “The Com,” known for small, disparate groups engaging in cybercriminal and sometimes violent activity, the researchers said.

A Google spokesperson told Reuters that roughly 20 organizations have been affected by the UNC6040 campaign, which has been observed over the past several months. A subset of those organizations had data successfully exfiltrated, the spokesperson said.

A Salesforce spokesperson told Reuters in an email that “there’s no indication the issue described stems from any vulnerability inherent in our platform.” The spokesperson said the voice calls used to trick employees “are targeted social engineering scams designed to exploit gaps in individual users’ cybersecurity awareness and best practices.”

The spokesperson declined to share the specific number of affected customers, but said that Salesforce was “aware of only a small subset of affected customers,” and said it was “not a widespread issue.”

Salesforce warned customers of voice phishing, or “vishing,” attacks and of hackers abusing malicious, modified versions of Data Loader in a March 2025 blog post.

(Reporting by AJ Vicens in Detroit; Editing by Leslie Adler and Franklin Paul)

You Might Also Like

Alpaca raises $52M Series C to take its API brokerage platform to new markets

Anti-aging zealot Bryan Johnson wants to start ‘foodome sequencing’

Astronomers Have Found a Prime Candidate for the Elusive Planet 9

Archaeologists Explored a ‘Blood Cave’—and Found Chopped-Up Maya Skulls

Nintendo Switch 2 pre-orders are now live

Share This Article
Facebook X Copy Link Print
Share
Previous Article Why AI acts so creepy when faced with being shut down Why AI acts so creepy when faced with being shut down
Next Article HELOC rates jump to near 2025 highs; home equity loans tick up too HELOC rates jump to near 2025 highs; home equity loans tick up too

Latest News

Rubio Reportedly Seeking Probe Into Harvard’s Hosting Of CCP-Run Reputed Paramilitary Group
Rubio Reportedly Seeking Probe Into Harvard’s Hosting Of CCP-Run Reputed Paramilitary Group
News June 10, 2025
Why Lockheed Martin Stock Just Dropped
Why Lockheed Martin Stock Just Dropped
Finance June 10, 2025
5 Top Dollar Tree Buys for Road Trips — Under
5 Top Dollar Tree Buys for Road Trips — Under $5
Finance June 10, 2025
Inflation rose less than expected last month despite Trump’s tariffs
Inflation rose less than expected last month despite Trump’s tariffs
Finance June 10, 2025
//
  • About Us
  • Contact US
  • Privacy Policy
onlyTrustedInfo.comonlyTrustedInfo.com
© 2025 OnlyTrustedInfo.com . All Rights Reserved.