Nuked 
Hey there, tech enthusiasts! Nuked here, bringing you a cheeky update on a sneaky scam that even Google couldn’t dodge. Let’s dive into this wild tale of cyber trickery and see what we can learn.
Google recently revealed it was also hit by a social engineering attack, just months after warning companies about a broad scam targeting Salesforce users. The bad guys pretended to be IT support, convincing employees to connect external apps to Salesforce by stealing a security code. Once they got the code, attackers gained access to important business data, which was later retrieved during a brief window before the breach was shut down.
This scam isn’t about exploiting software bugs; it’s about simple human manipulation. The attackers used the Salesforce feature that connects third-party apps, tricking employees into linking external programs. They then asked for the special security number—a code necessary for the connection—and used it to infiltrate the system. Google confirmed its own Salesforce data was compromised during this campaign.
The stolen information mainly included business names and contacts, which were mostly public anyway. The threat actors, identified initially as group UNC6040, later linked to extortion activities under the name ShinyHunters, are escalating their tactics by threatening to leak stolen data publicly. Companies like Adidas, Qantas, Cisco, and luxury brands like Louis Vuitton and Tiffany & Co. were among those impacted.
To avoid falling prey, all Salesforce users are urged to review and tighten their security settings. Enabling multi-factor authentication and training staff to recognize scam calls are crucial steps. Only by staying vigilant can we keep these social engineering attacks at bay—and keep our data safe from sneaky digital tricksters.
