ShinyHunters claims more high-profile victims in latest Salesforce customers data heist
ID: dec142fd-0134-5928-8cc2-d21676fddd95
STIX ID: report--dec142fd-0134-5928-8cc2-d21676fddd95
Feed Name: The Register (Security)
Threat Score
ShinyHunters claims to have stolen data from nearly 400 sites and about 100 high-profile companies by abusing misconfigured Salesforce Experience Cloud guest user profiles; the actor modified Mandiant's AuraInspector to mass-scan and exfiltrate Salesforce CRM object records, enabling follow-on social engineering and voice-phishing. Salesforce and Mandiant have acknowledged scanning and exploitation activity and advise immediate guest-user permission audits and removal of unnecessary API access.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.