Salesforce attacks in 2025: Simple tactics, serious impact

In this clip, Tim West, Director of Threat Intelligence at WithSecure, speaks with Elisa Mustonen, Product Marketing Manager for Cloud Protection for Salesforce, to unpack how some of the most alarming Salesforce attacks in 2025 used shockingly simple tactics.

They discuss recent incidents involving basic social engineering—like help desk scams and the use of an 8-digit code to install malicious apps—and why these low-tech approaches are still highly effective. Referencing reports on groups like UNC6040 (closely tied to Scattered Spider), Tim highlights how attackers are bypassing technical controls by exploiting human trust.

🔍 Key topics:
• The simplicity behind recent Salesforce intrusions
• Human-oriented attack vectors vs. technical exploits
• How threat actors are using social engineering to gain access
• What the 8-digit app install scam tells us about attacker strategy

If your organization uses Salesforce, this is your wake-up call. Even basic interactions can lead to major breaches.

View the full interview on why Salesforce is now a prime target for cyber attacks. https://www.youtube.com/watch?v=Li-WKARapmk

#SalesforceSecurity #CyberThreats #SocialEngineering #WithSecure #ThreatIntelligence #ScatteredSpider #UNC6040 #Cybersecurity

Видео Salesforce attacks in 2025: Simple tactics, serious impact канала WithSecure™ Cloud Protection for Salesforce