Google's Threat Intelligence Group has warned about an organization targeting Salesforce users through voice phishing schemes.
The attackers, known as UNC6040, manipulate employees through social engineering, gaining access to steal Salesforce data.
UNC6040 uses social engineering tactics rather than exploiting vulnerabilities in Salesforce to compromise networks.
Google advises companies to implement security measures like least privilege, rigorous access management, IP-based restrictions, and multifactor authentication to guard against such threats.