Hackers are tricking employees at companies in Europe and the Americas into installing a modified version of a Salesforce-related app, allowing the hackers to steal reams of data, gain access to ...

The hackers have “proven particularly effective at tricking employees” into installing a modified version of Salesforce’s Data Loade.

They impersonate Salesforce representatives, tricking employees into installing a malicious version of the Data Loader app.

Google’s Threat Intelligence Group says a vishing threat called UNC6040 has been targeting Salesforce applications with a fake data loader.

Hackers posed as Salesforce IT staff, using vishing to trick employees into installing malicious software for data theft and extortion.