UNC6040 Hacks Salesforce Via Vishing And Malicious Data Loader Apps, Google Warns
According to Google, attackers impersonate IT support on live calls, directing users to approve unauthorised Data Loader apps via Salesforce's connected app interface. These apps, often disguised with innocuous names like My Ticket Portal, grant …
A new Google Cloud Threat Intelligence report has revealed a sophisticated vishing campaign targeting Salesforce environments, enabling large-scale data theft and extortion. The operation, attributed to threat cluster UNC6040, leverages modified versions of Salesforce's Data Loader and malicious connected apps to compromise organisations—without exploiting any Salesforce vulnerabilities.
According to Google, attackers impersonate IT support on live calls, directing users to approve unauthorised Data Loader apps via Salesforce's connected app interface. These apps, often disguised with innocuous names like 'My Ticket Portal,' grant direct access to sensitive CRM data.
No legitimate Salesforce systems are compromised in the attacks, the bad actors exploit end-user trust to infiltrate other systems.
Once initial access is secured, attackers use harvested credentials to move laterally into platforms such as Okta and Microsoft 365. In some cases, exfiltration went undetected for months before extortion attempts occurred—sometimes under the banner of groups like ShinyHunters.
UNC6040's infrastructure included Okta phishing panels and commercial VPN services such as Mullvad. The group's techniques overlap with those seen in campaigns linked to 'The Com', a loosely affiliated cybercriminal collective.
GTIG advises defenders to implement strict access controls, limit API privileges, and use Salesforce Shield for anomaly detection. IP-based restrictions and rigorous app allowlisting are also critical, given the threat actors' reliance on human manipulation rather than technical exploits.
'This campaign demonstrates how modern attackers exploit trust and routine admin functions to bypass even hardened cloud environments,' GTIG noted.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Scoop
2 hours ago
- Scoop
Unlocking Cinematic AI Video: The Power Of Google Veo 3 API With Veo3API.ai
Article – Hugh Grant Unlike traditional video tools that require separate audio work, the Veo 3 API generates videos with natural, perfectly-timed sound. Dialogue, ambient noise, and even subtle audio cues are built directly into the outputlip-synced and immersive from the very first frame. Veo 3 is Google's next-generation AI video generation model, designed to revolutionize how we create cinematic content. Leveraging the power of multimodal generative AI, Google Veo 3 can turn simple text or image prompts into ultra-realistic 4K videos with synchronized audio, advanced lighting effects, and dynamic camera movements. Whether you're crafting a battlefield scene, an animated explainer, or a dramatic short film, Veo 3 understands physics, character consistency, and visual storytelling—making it a powerful tool for content creators, marketers, and filmmakers. To unlock the full creative power of Veo 3, developers and content creators can now use Veo 3 API —a seamless, programmatic way to generate high-quality videos directly within their platforms, apps, or automation tools. Whether you're producing short-form content, educational visuals, or marketing assets at scale, the Veo 3 API gives you direct access to advanced video generation features with speed, precision, and flexibility. Thanks to platforms like it's now easier and more affordable than ever to integrate Google Veo 3 into your workflow—with prices starting as low as $0.40 per video and support for fast, high-volume production. What Makes Veo 3 API a Game-Changer for AI Video Creation? Native Synchronized Audio Generation Unlike traditional video tools that require separate audio work, the Veo 3 API generates videos with natural, perfectly-timed sound. Dialogue, ambient noise, and even subtle audio cues are built directly into the output—lip-synced and immersive from the very first frame. Text-to-Video and Image-to-Video Support The API accepts both written prompts and reference images, making it easy to bring any concept to life. Describe a setting, emotion, or action—and the Veo 3 API responds with rich visual storytelling that feels hand-crafted. It's fast, flexible, and ready for everything from ads to short films. Advanced Scene Understanding What sets Google Veo 3 apart is how well it understands physical space. With built-in awareness of motion, lighting, and object interaction, it can simulate natural environments and lifelike behaviors—no post-production tweaks required. Character and Scene Consistency No more inconsistent faces or shifting backgrounds. Veo 3 API preserves continuity across shots, ensuring that characters, locations, and key elements remain stable and coherent. Ideal for brand narratives, dialogue-driven scenes, and long-form content. Intuitive Cinematic Camera Controls Creators can guide the lens like a director. Using descriptive prompts, you can control pans, tilts, zooms, and angles—allowing for fluid transitions and dynamic framing that add depth to every scene. Google Veo 3 API Pricing Comparison: Redefines Cost-Efficient Video Creation As AI video tools continue to gain traction, pricing transparency and cost-efficiency are becoming critical factors for developers and content creators alike. From indie studios to enterprise teams, access to the Veo 3 API can mean the difference between experimental limitations and creative freedom. So how do today's leading platforms compare? Most providers—including Replicate, and AIMLAPI—charge around $6.00 for an 8-second video with audio, or $0.75 per second. These rates can quickly escalate when producing longer clips or running multiple renders—making large-scale deployment expensive and restrictive. That's where changes the game. By offering both Veo 3 Fast and Veo 3 Quality modes, this platform provides unmatched flexibility and value. An 8-second Veo 3 Fast video with audio costs just $0.40, while a high-fidelity Veo 3 Quality video comes in at $2.00—delivering more than 60% savings compared to competing platforms. Platform Price (8s Video with Audio) Price per Second Supports Veo 3 Fast API (Fast) $0.40 $0.05 Yes (Quality) $2.00 $0.25 Yes $6.00 $0.75 No $6.00 $0.75 No AIMLAPI $6.30 $0.79 No Meanwhile, Google's official Veo 3 access via Vertex AI requires a subscription: $19.99/month for the Fast mode or $249.99/month for full feature access, with direct API usage priced at $0.75 per second. For many users, this cost—combined with limited preview availability—makes third-party access a more attractive route. With affordable, transparent pricing and full support for Google Veo 3 Fast API, is positioning itself as the go-to solution for scalable, real-time AI video creation—whether you're rendering a short clip or building a platform powered by generative video. How to Use the Veo 3 API with Using the Veo 3 API through is designed to be seamless and intuitive, whether you're a developer building new features or a content creator looking to generate dynamic, AI-powered videos. Here's how to get started: Step 1: Create an Account on Begin by signing up for an account on This gives you access to the dashboard, where you can manage your projects and access the Google Veo 3 API. Step 2: Generate Your API Key Once logged in, go to the API Key section and generate a personal access key. This key is required to authenticate and authorize all your video generation requests. Step 3: Try the Interactive Playground Before full integration, explore the Playground tool to test video generation using text prompts or image references. This step helps you understand how your inputs affect output quality, camera movements, and scene behavior. Step 4: Integrate the API into Your Workflow With your API key ready, you can start making requests from your application. Simply structure your input with the desired prompt, video duration, and other optional settings like aspect ratio or audio sync. The API will return a secure link to your generated video. Step 5: Review and Deploy Your Video Once your video is generated, download or embed it directly. Whether you're creating marketing content, social media visuals, or part of a larger production pipeline, the Veo 3 API makes it easy to go from concept to screen with just a few steps. Conclusion: The Smartest Way to Access Veo 3 As AI video generation enters a new era, tools like Veo 3 API are transforming how we create, communicate, and captivate. Whether you're producing immersive narratives, dynamic marketing visuals, or experimental creative work, Google Veo 3 offers unmatched realism, flexibility, and scalability. And with that power is now more accessible—and affordable—than ever. From fast, synchronized audio generation to cinematic camera control, it's a solution built for the future of video. For creators, developers, and businesses ready to lead in visual storytelling, Veo 3 API via is the smartest way to bring ideas to life—frame by frame.
Scoop
2 hours ago
- Scoop
Okta And Palo Alto Networks Unify AI-Driven Security To Fight Identity Attacks
Joint solutions help reduce the risk of breaches by preventing unauthorized access and mitigating dangerous security blind spots SAN FRANCISCO and SANTA CLARA – July 15, 2025 – As attacks grow more sophisticated and demand real-time response, verifying who accesses data and from what device has become essential to protecting it. Okta (NASDAQ: OKTA) and Palo Alto Networks (NASDAQ: PANW) today announced an expanded partnership with new integrations to deliver a unified security architecture, enabling customers to automate threat response, secure application access on any device, and reduce security roadblocks. The native integration between Okta Workforce Identity and Palo Alto Networks Prisma Access Browser creates a new conditional access method to restrict access to SSO apps by using only the secure browser. A second integration between Identity Threat Protection with Okta AI and Palo Alto Networks AI-driven Cortex® SecOps platform provides organizations with a unified view of identity-related risks across their entire attack surface. This integration extends to CortexSIAM ® and Cortex XDR ®, creating a comprehensive response to the most advanced attacks. 'AI is supercharging attacks on user credentials, requiring a 'fight AI with AI' approach that brings identity directly into an organization's security infrastructure for a real-time and unified response,' said Stephen Lee, VP of Technology Partnerships at Okta. "With Palo Alto Networks, Okta is proud to enhance the interoperability of our AI-powered platforms to prevent risks of siloed tools, providing nearly 2000 joint customers with a comprehensive view of their security posture, context-aware access controls, and secure authentication to stay ahead of today's threats." "Identity plays a critical role in cybersecurity," said Pam Cyr, VP of Technical Partnerships at Palo Alto Networks. 'Our deep integrations with Okta ensure that our solutions are engineered to work together, making it easier for our customers to achieve higher levels of security and user experience. These new integrations, from securing application access with Prisma Access Browser to providing unified protection against identity threats through our Cortex platform, empower organizations with comprehensive, AI-driven defense.' Commenting on the news, Stephanie Barnett, Vice President, Presales at Okta APJ said, "Across Asia Pacific, organisations are under pressure from faster, more targeted cyberattacks, yet too many still rely on siloed tools that can't keep pace. A more integrated, identity-centric approach is essential. That's why this expanded partnership between Okta and Palo Alto Networks matters. We are bringing identity into the centre of threat detection and response, improving visibility across the attack surface, and reducing complexity through intelligent automation. This announcement is a clear example of Okta's partner-first strategy in action, working with industry leaders to deliver powerful, scalable security solutions." "Today's dynamic, complex threat landscape requires organisations to strengthen identity protection while simplifying security operations. Our expanded partnership with Okta helps organisations fend off sophisticated identity-based attacks and build a strong Zero Trust framework, enabling seamless, secure access anywhere, on any device. This collaboration reflects our commitment to deliver unified, automated security outcomes that reduce complexity for customers across the region,' said Orcun Tezel, Vice President, Technical Solutions, Asia Pacific and Japan at Palo Alto Networks. These two new integrations help provide a clear, integrated path for joint customers to confidently secure their operations while reducing costs and complexity: · Securing access on any device: With Okta Workforce Identity and Prisma® Access Browser, enterprises now have a critical layer of defense for web-based activity. Employees can now securely access corporate web applications and data from managed or unmanaged devices without compromising enterprise security. Users will benefit from a secure, consistent, seamless, and fast browsing experience, while security teams gain enhanced visibility and control over SaaS and web application usage. · Unified identity threat detection and automated response: The integration of Okta's Identity Threat Protection solution with Cortex XSIAM and Cortex XDR enables dynamic enforcement of additional authentication for risky access and user activity. It triggers immediate, automated responses to threats such as revoking user access, ending active sessions, and quarantining endpoints. 'CISOs are clear: to move at pace with the threat landscape, security teams need integrated platforms, not just more solutions. With the rapid adoption of cloud services, SaaS applications, remote work, and now the advent of AI, organizations are being challenged by added complexity and gaps in security tools,' said Maxine Holt, Vice President, Enterprise & Channel Research at Omdia. 'By unifying their offerings, Okta and Palo Alto Networks are helping customers streamline operations, reduce complexity, and improve coverage of the attack surface.' For more information about these integrations, register to attend the virtual event, Zero Friction Defense: Where Identity Meets Security, on July 15 at 10 a.m. PT / 1 p.m. ET. About Okta Okta, Inc. is The World's Identity Company™. We secure Identity, so everyone is free to safely use any technology. Our customer and workforce solutions empower businesses and developers to use the power of Identity to drive security, efficiencies, and success — all while protecting their users, employees, and partners. Learn why the world's leading brands trust Okta for authentication, authorization, and more at About Palo Alto Networks As the global AI and cybersecurity leader, Palo Alto Networks (NASDAQ: PANW) is dedicated to protecting our digital way of life via continuous innovation. Trusted by more than 70,000 organizations worldwide, we provide comprehensive AI-powered security solutions across network, cloud, security operations and AI, enhanced by the expertise and threat intelligence of Unit 42. Our focus on platformization allows enterprises to streamline security at scale, ensuring protection fuels innovation. Explore more at
Scoop
3 hours ago
- Scoop
Unlocking Cinematic AI Video: The Power Of Google Veo 3 API With Veo3API.ai
Veo 3 is Google's next-generation AI video generation model, designed to revolutionize how we create cinematic content. Leveraging the power of multimodal generative AI, Google Veo 3 can turn simple text or image prompts into ultra-realistic 4K videos with synchronized audio, advanced lighting effects, and dynamic camera movements. Whether you're crafting a battlefield scene, an animated explainer, or a dramatic short film, Veo 3 understands physics, character consistency, and visual storytelling—making it a powerful tool for content creators, marketers, and filmmakers. To unlock the full creative power of Veo 3, developers and content creators can now use Veo 3 API —a seamless, programmatic way to generate high-quality videos directly within their platforms, apps, or automation tools. Whether you're producing short-form content, educational visuals, or marketing assets at scale, the Veo 3 API gives you direct access to advanced video generation features with speed, precision, and flexibility. Thanks to platforms like it's now easier and more affordable than ever to integrate Google Veo 3 into your workflow—with prices starting as low as $0.40 per video and support for fast, high-volume production. What Makes Veo 3 API a Game-Changer for AI Video Creation? Native Synchronized Audio Generation Unlike traditional video tools that require separate audio work, the Veo 3 API generates videos with natural, perfectly-timed sound. Dialogue, ambient noise, and even subtle audio cues are built directly into the output—lip-synced and immersive from the very first frame. Text-to-Video and Image-to-Video Support The API accepts both written prompts and reference images, making it easy to bring any concept to life. Describe a setting, emotion, or action—and the Veo 3 API responds with rich visual storytelling that feels hand-crafted. It's fast, flexible, and ready for everything from ads to short films. Advanced Scene Understanding What sets Google Veo 3 apart is how well it understands physical space. With built-in awareness of motion, lighting, and object interaction, it can simulate natural environments and lifelike behaviors—no post-production tweaks required. Character and Scene Consistency No more inconsistent faces or shifting backgrounds. Veo 3 API preserves continuity across shots, ensuring that characters, locations, and key elements remain stable and coherent. Ideal for brand narratives, dialogue-driven scenes, and long-form content. Intuitive Cinematic Camera Controls Creators can guide the lens like a director. Using descriptive prompts, you can control pans, tilts, zooms, and angles—allowing for fluid transitions and dynamic framing that add depth to every scene. Google Veo 3 API Pricing Comparison: Redefines Cost-Efficient Video Creation As AI video tools continue to gain traction, pricing transparency and cost-efficiency are becoming critical factors for developers and content creators alike. From indie studios to enterprise teams, access to the Veo 3 API can mean the difference between experimental limitations and creative freedom. So how do today's leading platforms compare? Most providers—including Replicate, and AIMLAPI—charge around $6.00 for an 8-second video with audio, or $0.75 per second. These rates can quickly escalate when producing longer clips or running multiple renders—making large-scale deployment expensive and restrictive. That's where changes the game. By offering both Veo 3 Fast and Veo 3 Quality modes, this platform provides unmatched flexibility and value. An 8-second Veo 3 Fast video with audio costs just $0.40, while a high-fidelity Veo 3 Quality video comes in at $2.00—delivering more than 60% savings compared to competing platforms. Platform Price (8s Video with Audio) Price per Second Supports Veo 3 Fast API (Fast) $0.40 $0.05 Yes (Quality) $2.00 $0.25 Yes $6.00 $0.75 No $6.00 $0.75 No AIMLAPI $6.30 $0.79 No Meanwhile, Google's official Veo 3 access via Vertex AI requires a subscription: $19.99/month for the Fast mode or $249.99/month for full feature access, with direct API usage priced at $0.75 per second. For many users, this cost—combined with limited preview availability—makes third-party access a more attractive route. With affordable, transparent pricing and full support for Google Veo 3 Fast API, is positioning itself as the go-to solution for scalable, real-time AI video creation—whether you're rendering a short clip or building a platform powered by generative video. How to Use the Veo 3 API with Using the Veo 3 API through is designed to be seamless and intuitive, whether you're a developer building new features or a content creator looking to generate dynamic, AI-powered videos. Here's how to get started: Step 1: Create an Account on Begin by signing up for an account on This gives you access to the dashboard, where you can manage your projects and access the Google Veo 3 API. Step 2: Generate Your API Key Once logged in, go to the API Key section and generate a personal access key. This key is required to authenticate and authorize all your video generation requests. Step 3: Try the Interactive Playground Before full integration, explore the Playground tool to test video generation using text prompts or image references. This step helps you understand how your inputs affect output quality, camera movements, and scene behavior. Step 4: Integrate the API into Your Workflow With your API key ready, you can start making requests from your application. Simply structure your input with the desired prompt, video duration, and other optional settings like aspect ratio or audio sync. The API will return a secure link to your generated video. Step 5: Review and Deploy Your Video Once your video is generated, download or embed it directly. Whether you're creating marketing content, social media visuals, or part of a larger production pipeline, the Veo 3 API makes it easy to go from concept to screen with just a few steps. Conclusion: The Smartest Way to Access Veo 3 As AI video generation enters a new era, tools like Veo 3 API are transforming how we create, communicate, and captivate. Whether you're producing immersive narratives, dynamic marketing visuals, or experimental creative work, Google Veo 3 offers unmatched realism, flexibility, and scalability. And with that power is now more accessible—and affordable—than ever. From fast, synchronized audio generation to cinematic camera control, it's a solution built for the future of video. For creators, developers, and businesses ready to lead in visual storytelling, Veo 3 API via is the smartest way to bring ideas to life—frame by frame.
