How to check if you've been affected by Salesforce attacks - and stop hackers dead in their tracks

"The FBI has issued a FLASH alert over the threat posed to enterprises by threat groups targeting Salesforce environments."

"According to the law enforcement agency, two threat groups, tracked as UNC6040 and UNC6395, have ramped up targeting of Salesforce customers amidst a spate of attacks in recent months."

"'Both groups have recently been observed targeting organizations' Salesforce platforms via different initial access mechanisms,' the FBI said in its ."

"These include ' vishing ' (voice-based phishing) attacks to dupe users into granting access to Salesforce accounts."

The FBI issued a FLASH alert warning that enterprises face threats from groups targeting Salesforce environments. Two threat groups, tracked as UNC6040 and UNC6395, have increased attacks against Salesforce customers in recent months. Both groups have been observed targeting Salesforce platforms using different initial access mechanisms. UNC6040 has targeted Salesforce since October 2024, commonly gaining access through social engineering techniques. Those techniques include vishing, or voice-based phishing, used to trick users into granting access to Salesforce accounts. The FBI released indicators of compromise to maximize awareness among potential targets.

Read at IT Pro