← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
IOC - Google Salesforce Breach: A Deep dive into the chain and extent of the compromise
WHITE UNC6040, UNC6240 celestre 2025-09-04 Modified: 2025-10-03
5
IOCs
LOW VOLUME
salesforcevishingtorsaas securitycloud securitydata exfiltrationoauthsocial engineering
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (5)
All domain
TYPEINDICATORDESCRIPTIONCREATED
domain ticket-audemarspiguet.com — 2025-09-04
domain ticket-dior.com — 2025-09-04
domain ticket-nike.com — 2025-09-04
domain tuta.com — 2025-09-04
domain tutamail.com — 2025-09-04
References (1)
↗ https://www.seqrite.com/blog/google-salesforce-breach-unc6040-threat-research/