Cybercrime Observations from the Frontlines: UNC6040 Proactive Hardening Recommendations | Google Cloud Blog

UNC6040 is a financially motivated threat group that uses highly convincing vishing attacks to trick employees into authorizing malicious Salesforce connected apps, enabling rapid data theft and extortion—making robust identity verification, SaaS hardening, and advanced detection essential for defense.