Back Issues This Week → Current Issue → Popular →

All issuesVolume 331, Issue 3IT Vendor NewsKnowBe4

Protect Yourself From Voice Phishing Attacks Targeting Salesforce Instances

KnowBe4, Thursday, October 16th, 2025

Google's Mandiant has published guidance on defending against an ongoing wave of social engineering attacks targeting organizations' Salesforce instances.

The organized criminal gang tracked by Google as 'UNC6040' has been using voice phishing attacks to trick employees into granting access.

'Over the past several months, UNC6040 has demonstrated repeated success in breaching networks by having its operators impersonate IT support personnel in convincing telephone-based social engineering engagements,' the researchers write.

more →  ·  More from KnowBe4 →