Extortion Groups

Icarus Extortion Group Used Klue OAuth Breach to Steal Salesforce CRM Data

Investigators say attackers used a dormant integration credential to harvest OAuth tokens to access then exfiltrate customer Salesforce CRM records.