Hackers abuse modified Salesforce app to steal data, extort companies, Google says

Hackers are tricking employees at companies in Europe and the Americas into installing a modified version of a Salesforce-related app, allowing the hackers to steal reams of data, gain access to other corporate cloud services and extort those companies, Google said on Wednesday.

The hackers, tracked by the Google Threat Intelligence Group as UNC6040, have “proven particularly effective at tricking employees” into installing a modified version of Salesforce’s Data Loader, a proprietary tool used to bulk import data into Salesforce environments, the researchers said.

https://www.thehindu.com/sci-tech/technology/hackers-abuse-modified-salesforce-app-to-steal-data-extort-companies-google-says/article69659320.ece