How the threat actor, tracked as UNC (uncategorised) 6395, obtained the OAuth tokens from Salesloft to exfiltrate data from customer Salesforce instances wasn't detailed. Saleslof ...

ShinyHunters is a notorious cybercrime group that has resurfaced with a new playbook of SaaS-focused attacks. Known for monetizing stolen data on underground forums since 2020, ShinyHunters has ...

Cloudflare, Palo Alto Networks, and Zscaler said their Salesforce instances were hacked as part of the Salesforce-Salesloft ...

Per the Google Threat Intelligence Group report, the cybercrooks deployed a technique called ‘Vishing’ which is essentially ...

Hackers posed as Salesforce IT staff, using vishing to trick employees into installing malicious software for data theft and extortion.

Salesforce customers have again been targeted in a “widespread data theft campaign,” this time via compromised OAuth tokens ...