Hackers on the Line: UNC6040’s Vishing Scams Targeting Salesforce Users
UNC6040 hackers are pulling off voice phishing capers by impersonating IT support on the phone. Their mission? Smooth-talk employees into granting access to Salesforce and more, all while relying on good old human error. It’s like tech support, but with a sinister twist!
Hot Take:
UNC6040 has taken “call me maybe” to a whole new level with their vishing antics, proving once again that sometimes the biggest security threat is just a chatty “IT support” agent on the other side of the line. Who knew a phone call could be more dangerous than a zero-day exploit?
Key Points:
- UNC6040 uses voice phishing to impersonate IT staff over the phone.
- Their main target is Salesforce, exploiting human error rather than technical vulnerabilities.
- Data theft is sometimes followed by delayed extortion attempts, linked to ShinyHunters.
- The group moves laterally to access platforms like Okta and Microsoft 365 for more data.
- Google’s Threat Intelligence Group suggests permissions management and monitoring as defenses.
Already a member? Log in here