CloudBleepingComputerabout 2 hours ago
"City-Forum" data-theft attacks target Salesforce, ServiceNow portals
1 min read
A data-theft campaign dubbed City-Forum targets Salesforce Experience Cloud and ServiceNow portals, exploiting guest-user misconfigurations. All attacks originate from IP 158.220.87.79, hosted by Contabo, and use the Go-http-client/1.1 user agent. Reco reports activity is ongoing and increasing, with no evidence linking it to ShinyHunters.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storySalesforce
Summary by ByteBrief
