黑客骗了20多家公司的员工 安装了一个假的销售系统应用程序 窃取敏感数据 Hackers tricked employees at 20+ companies into installing a fake Salesforce app, stealing sensitive data.

冒充销售力量支持的黑客欺骗了大约20家美国和欧洲公司的雇员安装一个假数据加载器应用程序,使他们能够窃取敏感数据并获取其他公司服务。 Hackers posing as Salesforce support tricked employees at about 20 US and European companies into installing a fake Data Loader app, allowing them to steal sensitive data and access other corporate services. 身为UNC6040, 黑客使用语音电话欺骗员工批准未经授权的应用程序。 Known as UNC6040, the hackers use voice calls to deceive employees into approving the unauthorized app. 谷歌威胁情报组发现,这些攻击依靠社会工程,利用网络安全意识方面的差距,而不是利用软件的脆弱性。 Google's Threat Intelligence Group revealed that these attacks depend on social engineering, exploiting gaps in cybersecurity awareness rather than exploiting software vulnerabilities. Salesforce 已警告客户注意这些语音网络钓鱼策略。 Salesforce has warned customers about these voice phishing tactics.