Google says hackers are using fake Salesforce app to attack businesses
Hackers are targeting employees at companies across Europe and the Americas using a sophisticated social engineering campaign involving a modified Salesforce app,
's
cybersecurity
arm has said.
Tired of too many ads? go ad free now
According to Google's Threat Intelligence Group (GTIG), the attackers—identified as UNC6040—have been 'particularly effective' in deceiving corporate users into installing a fake version of
Salesforce Data Loader
, a legitimate tool used for importing large datasets into Salesforce environments.
How hackers are targeting large companies
The team at Google explains that the hackers impersonate official Salesforce representatives and are calling employees to direct them to a fake app setup page.
There, users are tricked into authorising a malicious version of the Data Loader app that mimics the original software.
Once installed, the app grants attackers significant access to sensitive corporate data. Google researchers noted that the hackers can exfiltrate confidential information, query internal systems, and in many cases, pivot to attack other cloud services and internal networks.
As per the researchers, technical indicators suggest that the campaign has ties to 'The Com', a loosely organised cybercriminal ecosystem known for orchestrating both online fraud and real-world violence.
What Google and Salesforce have to say
A Google spokesperson told news agency Reuters that at least 20 organisations have been affected by the UNC6040 operation over the past several months, with some suffering successful data breaches and extortion attempts.
Meanwhile, Salesforce, stated that the issue does not stem from any vulnerability in its platform. A company spokesperson emphasised that the attacks rely on voice phishing (vishing) tactics and exploit gaps in employee cybersecurity awareness.
Tired of too many ads? go ad free now
'There's no indication the issue described stems from any vulnerability inherent in our platform,' the spokesperson said, adding that the number of affected customers is small and the threat is not considered widespread.
Salesforce had previously issued a warning in March 2025, cautioning users about vishing attacks and the risks posed by malicious versions of Data Loader.
Stay ready with these 7 essential medical gadgets as COVID cases rise
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Time of India
19 minutes ago
- Time of India
RBI as lender of last resort: A lifeline for NBFCs in crisis
Sunil Kanoria is a Kolkata-based Indian businessman with over 35 years of experience in the infrastructure sector including infrastructure leasing & finance. He had the distinction of serving ASSOCHAM, India's oldest and leading chamber of commerce, as President and has served as Member of the Infrastructure Sector in the 10th Five Year Plan of the Planning Commission of the Government of India. He also served as a Council Member of the Institute of Chartered Accountants of India, nominated by the Government of India. He is the former President of The Agri-Horticultural Society of India. Sunil has been engaged in policy advocacy on matters related to economy. Sunil is a visionary who correctly assessed the Indian economy's infrastructure needs at the beginning of his career and anticipated the imminent role of the private sector in infrastructure creation. With foresight and a knack for taking calculated risks, Sunil converted several pioneering ideas into business reality within the infrastructure domain, many of which were first-of-its kind in India. Focusing on spirituality, Kanoria Foundation has organized confluences with a conglomeration of major issues on Humanity, Power (inner & outer) and Spirituality at Work. Kanoria Foundation organized World Confluences since 2009 which was also attended by former Presidents of India, Late Dr APJ Abdul Kalam and Late Shri Pranab Mukherjee respectively, among other distinguished luminaries from all walks of life globally. LESS ... MORE The Reserve Bank of India (RBI) is reportedly set to redefine its role by preparing to act as a lender of last resort for non-banking financial companies (NBFCs), mutual funds, and microfinance institutions during severe liquidity crises. As reported by the press last week, this move aims to ensure the survival of these entities when they are excluded from lending markets during crises. Given their deep ties to the banking system through borrowings and investments, this step is vital for financial stability. The RBI's economic capital framework (ECF) committee recently raised the contingency risk buffer (CRB) band, indicating readiness to intervene in crises. While post-pandemic asset purchases focused on public assets, the RBI is now considering private asset purchases in future crises. This policy shift acknowledges that NBFCs and other regulated entities are as critical to financial stability as banks. Over the past two decades, the RBI has tightened NBFC oversight, aligning it with banking regulations. Extending the lender-of-last-resort function to these institutions is a logical next step. However, this initiative is overdue. Past crises have exposed NBFCs' vulnerabilities. For example, during the 2018 liquidity crunch, infrastructure finance companies faced a severe asset-liability mismatch, worsened by the RBI's COVID-19 moratorium guidelines in 2020. While borrowers received relief, NBFCs were pressured by creditors, leading to bankruptcy proceedings. Timely liquidity support could have averted such outcomes, stabilizing similar institutions and reducing risks to the financial sector. Globally, central banks have long supported non-bank institutions during crises. In the United States, the Federal Reserve has been instrumental in stabilizing NBFCs and mutual funds. During the 2008 financial crisis, the Fed's Commercial Paper Funding Facility (CPFF) provided liquidity to money market mutual funds and other non-bank entities facing funding shortages. In 2020, the Money Market Mutual Fund Liquidity Facility (MMLF) enabled institutions to purchase assets from money market funds, preventing a collapse in short-term funding markets. These actions highlight the critical role central banks play in supporting non-bank entities to maintain financial stability. In Europe, the European Central Bank (ECB) has similarly supported NBFCs during crises. In 2020, the ECB expanded asset purchase programs and offered targeted longer-term refinancing operations (TLTROs) to indirectly ensure liquidity for non-bank institutions through banks. The Bank of England's COVID Corporate Financing Facility (CCFF) also supported large non-bank firms by purchasing commercial paper, ensuring operational continuity during market disruptions. These global examples demonstrate the effectiveness of central banks extending their lender-of-last-resort function beyond banks. The RBI's proposed framework aligns India with these global practices. By acting as a lender of last resort, the RBI can prevent systemic shocks from liquidity freezes in NBFCs or mutual funds. Their interconnectedness with banks means their failure could trigger a domino effect, threatening the financial ecosystem. Past crises affecting infrastructure finance companies underscore the consequences of inaction. Had this mechanism been in place earlier, significant disruptions might have been avoided. Yet, the RBI must proceed cautiously. Extending this role requires clear guidelines to prevent moral hazard, where NBFCs might take excessive risks expecting bailouts. The RBI should establish strict eligibility criteria and robust oversight to ensure only well- managed institutions facing temporary liquidity issues receive support. It must also balance interventions to avoid crowding out private market solutions, which could stifle innovation and competition. The RBI's move to become a lender of last resort for NBFCs, mutual funds, and microfinance institutions is a forward-thinking step. It addresses a critical gap in India's financial safety net, aligning with practices of global central banks like the Federal Reserve and ECB. While commendable, its success depends on precise implementation to ensure stability without encouraging reckless behaviour. Had this framework been introduced earlier, the financial sector might have been spared some amount of distress. The RBI's proactive stance promises a more resilient financial system for India. Facebook Twitter Linkedin Email Disclaimer Views expressed above are the author's own.
The Print
an hour ago
- The Print
RBI rate cut to spur Kolkata housing demand by 5-10pc: CREDAI
'In FY2024-25, Kolkata saw the sale of around 17,389 residential units, marking a 16 per cent rise year-on-year,' he said. 'The lower interest rate regime would make home loans cheaper, driving up demand by at least 5 to 10 per cent in the coming months,' Sushil Mohta, CREDAI West Bengal President, told PTI. Kolkata, Jun 6 (PTI) The Reserve Bank of India's decision to cut the repo rate by 50 basis points to 5.5 per cent, along with a 100 basis points reduction in the cash reserve ratio (CRR), is set to boost housing demand in Kolkata's residential property market by 5-10 per cent, particularly in the affordable segment, real estate developers said on Friday. The stock of unsold affordable homes in the city dropped to 12,783 units in March 2025 from 16,069 units a year ago, reflecting sustained buyer interest despite relatively stable prices. 'Kolkata is largely an affordable housing market, and the rate cut will make home ownership more accessible while easing borrowing costs for developers. The CRR cut will further improve liquidity for both homebuyers and builders,' Mohta who is also Chairman of the Merlin Group added. Despite a moderate 10 per cent increase in residential prices over the past two years—lower than Bengaluru (29 per cent), NCR (20 per cent) and Mumbai (13.5 per cent)—Kolkata's price points are expected to remain steady going forward, given limited profit margins in the segment. Mahesh Agarwal, Managing Director of Purti Realty, echoed similar sentiments. 'The RBI's policy decision will sharply reduce borrowing costs and make credit more affordable. We expect demand to rise across all segments—affordable, mid-income and luxury. Lower EMIs will improve access to homeownership and spur greater participation in the real estate market,' he said. According to developers, the RBI's move comes at a crucial time when buyer sentiment is gradually strengthening, and the city's property market, while conservative in pricing, is poised for higher transaction volumes in the new financial year. Industry players believe that the rate cut signals renewed confidence in the broader economy and is likely to have a ripple effect on construction activity, employment generation, and allied sectors in Kolkata. Real estate's contribution to the state's GDP and employment is significant, which is why the state government had extended fiscal and policy incentives to boost sales during the COVID-19 pandemic. PTI BSM NN This report is auto-generated from PTI news service. ThePrint holds no responsibility for its content.
Mint
2 hours ago
- Mint
Microsoft integrates AI shopping into Copilot app, bringing price tracking and smart comparisons
Microsoft has launched Copilot Shopping, an AI-enhanced shopping experience built into its Copilot app for web and mobile users, offering a streamlined end-to-end purchasing journey powered by artificial intelligence. The new feature is also expected to arrive on AI-powered desktop PCs in the near future. Announced during Microsoft's 50th anniversary celebrations, Copilot Shopping aims to transform the way users discover, compare, and buy products online. The system allows users to explore items based on natural language queries, track prices, view consumer reviews, and even complete purchases without ever leaving the app. According to a recent post by Microsoft Copilot's official account on X, the feature builds on the company's efforts to bring generative AI to everyday tasks. It comes shortly after similar initiatives by Google and OpenAI, which introduced AI shopping capabilities via Search and ChatGPT, respectively. Copilot Shopping works as a comprehensive virtual assistant that starts from product discovery and carries the user all the way to checkout. Users can ask specific or open-ended questions—such as 'What's the best smartwatch for fitness tracking?' or 'I'm starting to learn photography. What gear do I need?'—and the AI will respond with curated, interactive visual cards showing relevant products. These product listings include summaries, technical specifications, pros and cons, and user-generated reviews. Once a product is selected, Copilot compares prices across multiple retailers, showing users the most competitive rates. From there, shoppers can proceed to checkout natively within the app, avoiding the need to switch between different e-commerce platforms. One of the more innovative aspects of Copilot Shopping is its price tracking capability. The tool displays the historical price range of a product and allows users to set a preferred purchase price using a slider interface. If and when the product's price matches the desired level, the app sends a notification, prompting the user to finalise the purchase directly. Microsoft began testing the shopping feature last month, as reported by TestingCatalog. With its rollout now underway, the tech giant is positioning Copilot Shopping as an AI-first retail companion, offering both convenience and insight in an increasingly crowded e-commerce landscape.
