FBI Alert: How UNC6040 & UNC6395 Are Targeting Salesforce and How to proactively prevent it
Summary
The FBI has issued an urgent alert about two cybercriminal groups, UNC6040 and UNC6395, targeting Salesforce platforms. It highlights the tactics these groups use to infiltrate Salesforce environments and offers proactive prevention strategies to safeguard data and operations. Salesforce teams should focus on strengthening security protocols and monitoring suspicious activities to mitigate risks.
Takeaways
- Implement enhanced monitoring for suspicious login and API activity.
- Regularly review and tighten Salesforce user permissions and access controls.
- Apply multi-factor authentication for all Salesforce accounts.
- Stay updated on FBI and security advisory alerts for emerging threats.
- Educate users about phishing and social engineering tactics targeting Salesforce.
🚨 Immediate Action Required On September 12, 2025, the FBI issued FLASH alert FLASH-20250912-001 warning about two cybercriminal groups actively targeting Salesforce platforms. Major companies...