ShinyHunters Targets Hundreds of Websites in New Salesforce Campaign
ATT&CK techniques detected
T1525Implant Internal Image
37%
“shinyhunters targets hundreds of websites in new salesforce campaign salesforce has urged experience cloud customers to audit their website configurations after reports that a notorious threat group has already stolen data from hundreds of companies. the saas giant said that it h…”
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for .
Loading techniques…
T1671Cloud Application Integration
30%
“campaigns : new data theft campaign targets salesforce via salesloft app. salesforce was at pains to point out that the threat actors are exploiting a “ customer - configured guest user setting, not a platform security flaw. ” shinyhunters gives a final warning the infamous shiny…”
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for .
Loading techniques…
Summary
Prolific ShinyHunters group claims to have stolen data from nearly 400 websites in Experience Cloud attacks