Salesforce, ServiceNow Data Targeted in ‘City-Forum’ Attacks

Salesforce, ServiceNow data targeted in ‘City-Forum’ attacks

Records held in Salesforce and ServiceNow systems are under attack leaving user data exposed, according to researchers at Reco. The attack appears similar to those perpetrated by the extortion group ShinyHunters, Reco said. ShinyHunters has been particularly active this year, attacking dating sites in January and Oracle in June, and there are fears that they could have found a new target. Reco has named the latest campaign of attacks “City-Forum…

City-Forum Campaign Puts Salesforce and ServiceNow Portals at Risk

City-Forum is a year- plan aimed at stealing data from organizations that have weak Salesforce Experience Cloud and ServiceNow customer portals. Special tools are used to get data that can be seen by people who are not identified. This campaign is watched by the SaaS security company Reco. It has affected companies in telecommunications, financial services, enterprise software, cybersecurity, data privacy and the public sector.  The activity is …