1
Shutting the Door on Vishing-Driven Data Theft in Salesforce - "UNC6040’s phone-phishers lure employees into approving a fake dataloader[.]io app, hijacking Salesforce APIs to siphon customer data." (appomni.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
2 comments fedilink hide all child comments
top 2 comments
sorted by: hot top controversial new old
[-] digicat@infosec.pub 1 points 6 days ago

press reporting - https://www.bleepingcomputer.com/news/security/shinyhunters-behind-salesforce-data-theft-attacks-at-qantas-allianz-life-and-lvmh/

[-] digicat@infosec.pub 1 points 6 days ago

original technical reporting - https://cloud.google.com/blog/topics/threat-intelligence/voice-phishing-data-extortion

this post was submitted on 29 Jul 2025
1 points (100.0% liked)

blueteamsec

431 readers
18 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub