Tag: salesloft drift

1 Attack Reports | 0 Vulnerabilities

Attack reports

Widespread Data Theft Targets Salesforce Instances via Salesloft Drift - Hunting pulse

A widespread data theft campaign, conducted by UNC6395, targeted Salesforce customer instances through compromised OAuth tokens associated with the Salesloft Drift application. The actor systematically exported large volumes of data from numerous corporate Salesforce instances, focusing on harvesti…
supply chain
data theft
credential harvesting
salesforce
2025-09-08
oauth tokens
salesloft drift
Published: September 8, 2025
Linked vulnerabilities : CVE-2025-53690
Downloadable IOCs: 8
Click here to see more Attack Reports