this post was submitted on 29 Jul 2025
1 points (100.0% liked)

blueteamsec

441 readers
36 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
1
Shutting the Door on Vishing-Driven Data Theft in Salesforce - "UNC6040’s phone-phishers lure employees into approving a fake dataloader[.]io app, hijacking Salesforce APIs to siphon customer data." (appomni.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
2 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] digicat@infosec.pub 1 points 1 week ago

press reporting - https://www.bleepingcomputer.com/news/security/shinyhunters-behind-salesforce-data-theft-attacks-at-qantas-allianz-life-and-lvmh/