Tag: shinyhunters

1 Attack Reports | 0 Vulnerabilities

Attack reports

Cyber Criminal Groups Compromising Salesforce Instances for Data Theft and Extortion

Two cyber criminal groups, UNC6040 and UNC6395, are targeting organizations' Salesforce platforms for data theft and extortion. UNC6040 uses social engineering, particularly voice phishing, to gain access to Salesforce accounts. They trick employees into granting access or sharing credentials, then…
social engineering
data theft
extortion
vishing
oauth
salesforce
2025-09-15
api exfiltration
shinyhunters
Published: September 15, 2025
Downloadable IOCs: 59
Click here to see more Attack Reports