Google Exposes Vishing Group UNC6040 Targeting Salesforce with Fake Data Loader App
Google revealed information on a financially driven threat cluster that "specializes" in voice phishing (also known as vishing) attacks intended to compromise Salesforce instances of businesses in order to steal massive amounts of data and then extort victims.
Under the alias UNC6040, the internet giant's threat intelligence team is monitoring the activity, which it claims demonstrates traits similar to threat organizations connected to an online cybercrime collective called The Com.
According to a report provided to The Hacker News, UNC6040 has repeatedly succeeded in accessing networks over the last few months by using its operators to pose as IT support staff in convincing phone-based social engineering engagements.
According to Google's Threat Intelligence Group (GTIG), this ...