On August 5, 2025, Google Group (Gtig) reported that hackers have determined as Shinyhunters (UNC6040) has been able to access a corporate database located in Salesforce. Through phone calls providing technical support, they convinced employees to allow suspicious connections with false versions of the data loader, which allowed the attackers to copy data.
Filtering has reached historical dimensions: 2.5 billion Gmail accounts have been billed, mostly small and medium -sized enterprises using Google Services via SalesForce. Related data include commercial names and email addresses, but not passwords and direct financial information.
Risks for users and companies
Although the powers were not leaked, the attackers could use stolen information for companies phishingedition of a person or attempt to extort. In fact, some organizations reported that they received emails and calls in which payments were needed in Bitcoin under the threat of the stolen data.
Google has already informed the affected users and companies and emphasized the importance of strengthening digital security at both individual and corporate levels.
Safety Recommendations
For private users, the company advised to activate the check in two stages, update and strengthen passwords, distrustful emails or suspicious calls and periodically control the activities of accounts.
In the case of companies, measures include resolution restrictions, monitoring applications, social engineering personnel training, the application of permanent checks and the establishment of mass discharge alerts or unusual behavior.
(Visited 98 times, 6 visits today)
