Google says hackers are using fake Salesforce app to attack businesses

Hackers are targeting employees at companies across Europe and the Americas using a sophisticated social engineering campaign involving a modified Salesforce app, Google’s cybersecurity arm has said. According to Google’s Threat Intelligence Group (GTIG), the attackers—identified as UNC6040—have been “particularly effective” in deceiving corporate users into installing a fake version of Salesforce Data Loader, a legitimate tool used for importing large datasets into Salesforce environments.

How hackers are targeting large companies