Hackers impersonating IT teams to steal Salesforce data, Google warns

Early warning from Salesforce

Salesforce warned of the threat of a “malicious connected app” in March.

“In some cases, we have observed that the malicious connected app is a modified version of the Data Loader app published under a different name and/or branding. Once the threat actor gains access to a customer’s Salesforce account or adds a connected app, they use the connected app to exfiltrate data,” the company wrote in a blog post.

To help its customers, the organisation highlighted key platform features and outlined best practices, such as enabling multi-factor authentication, adding a security contact, and restricting login IP ranges to the company and VPN network.

“While not exhaustive, this list includes links to additional resources so customers can make informed security decisions that best protect their Salesforce instances,” it said.

Phishing is the most common form of cybercrime, with an estimated 3.4 billion spam emails sent every day, according to AAG IT Services.