Zero-day in Salesforce email services exploited in targeted Facebook phishing campaign

Experts spotted a spear-phishing Facebook campaign exploiting a zero-day vulnerability in Salesforce email services. Researchers from Guardio Labs uncovered a sophisticated phishing campaign exploiting a zero-day vulnerability in Salesforce email services and SMTP servers. The phishing campaigns are able to evade conventional detection methods by chaining the Salesforce vulnerability and legacy quirks in Facebook’s web […]

The post Zero-day in Salesforce email services exploited in targeted Facebook phishing campaign appeared first on Security Affairs.

breaking news campaign campaigns cybercrime detection email evade experts exploited exploiting facebook guardio guardio labs hacking information security news it information security labs phishing phishing campaign pierluigi paganini researchers salesforce servers services smtp vulnerability zero-day zero-day vulnerability