Salesforce fixes vulnerability exploited in targeted phishing attacks on Facebook accounts

Salesforce has fixed a vulnerability in its email services that was being exploited in targeted phishing attacks against high-profile Facebook accounts. 

Researchers at Guardio Labs discovered a zero-day flaw in Salesforce, which allowed the attackers to send phishing emails using Salesforce's own domain and infrastructure. This gave the attackers the ability to appear as though their messages originated from a trusted source.

The bug, named "PhishForce" by the researchers, was found in Salesforce's "email-to-case" feature, which allows users to automatically create new case tickets based on customer emails.

In the phishing emails collected by Guardio, the messages appeared to come from Meta Platforms through the case.salesforce.com domain.

Guardio has informed Meta of the issue, and the company is currently investigating why their detections and mitigations did not detect these types of attacks.

- CyberBeat