#voice-phishing

#voice-phishing

The threat group UNC6040 is successfully using voice phishing to exploit organizations and access sensitive data, particularly in Salesforce instances.

The hacker group UNC6040 exploits voice phishing to gain credentials and access to Salesforce from employees in large organizations.

UNC6040 specializes in vishing campaigns targeting Salesforce for data theft.

The group uses social engineering tactics to impersonate IT support.

Attackers deploy a modified Salesforce Data Loader for unauthorized access.

The threats allow lateral movement within victims' networks to gather more data.